|
From: | Dmitry Potapov |
Subject: | [lwip-devel] [bug #19225] bind, connect, and sendto should verify input paramers |
Date: | Wed, 07 Mar 2007 07:36:05 +0000 |
User-agent: | Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.10) Gecko/20070216 Firefox/1.5.0.10 |
URL: <http://savannah.nongnu.org/bugs/?19225> Summary: bind, connect, and sendto should verify input paramers Project: lwIP - A Lightweight TCP/IP stack Submitted by: dpotapov Submitted on: Wednesday 03/07/2007 at 07:36 Category: sockets Severity: 3 - Normal Item Group: Faulty Behaviour Status: None Privacy: Public Assigned to: None Open/Closed: Open Discussion Lock: Any _______________________________________________________ Details: I have attached the patch, which check namelen and sin_family in the aformentioned functions if ((namelen != sizeof(struct sockaddr_in)) || ((((struct sockaddr_in *)name)->sin_family) != AF_INET)) { sock_set_errno(sock, EINVAL); return -1; } _______________________________________________________ File Attachments: ------------------------------------------------------- Date: Wednesday 03/07/2007 at 07:36 Name: socket-inaddr-check.patch Size: 1kB By: dpotapov <http://savannah.nongnu.org/bugs/download.php?file_id=12137> _______________________________________________________ Reply to this item at: <http://savannah.nongnu.org/bugs/?19225> _______________________________________________ Message sent via/by Savannah http://savannah.nongnu.org/
[Prev in Thread] | Current Thread | [Next in Thread] |