ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

2305. [security] inet_network() buffer overflow. CVE-2008-0122.

Browse Source
This commit is contained in:
Mark Andrews
2008-01-15 04:02:01 +00:00
parent 938b1008d9
commit fcdafc1e30
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGES
View File

@@ -1,3 +1,5 @@
2305. [security] inet_network() buffer overflow. CVE-2008-0122.
2304. [bug] Check returns from all dns_rdata_tostruct() calls.
[RT #17460]

4
lib/bind/inet/inet_network.c
View File

@@ -84,9 +84,9 @@ again:
}
if (!digit)
return (INADDR_NONE);
if (pp >= parts + 4 || val > 0xffU)
return (INADDR_NONE);
if (*cp == '.') {
if (pp >= parts + 4 || val > 0xffU)
return (INADDR_NONE);
*pp++ = val, cp++;
goto again;
}