2305. [security] inet_network() buffer overflow. CVE-2008-0122.

This commit is contained in:
Mark Andrews 2008-01-16 05:15:36 +00:00
parent a7637b7db7
commit 8bc3fe510b
2 changed files with 3 additions and 2 deletions

View file

@ -1,3 +1,4 @@
2305. [security] inet_network() buffer overflow. CVE-2008-0122.
--- 9.2.9 released ---

View file

@ -84,9 +84,9 @@ again:
}
if (!digit)
return (INADDR_NONE);
if (pp >= parts + 4 || val > 0xffU)
return (INADDR_NONE);
if (*cp == '.') {
if (pp >= parts + 4 || val > 0xffU)
return (INADDR_NONE);
*pp++ = val, cp++;
goto again;
}