summaryrefslogtreecommitdiff
path: root/sys/src/libip
diff options
context:
space:
mode:
authorcinap_lenrek <cinap_lenrek@gmx.de>2013-04-02 03:39:24 +0200
committercinap_lenrek <cinap_lenrek@gmx.de>2013-04-02 03:39:24 +0200
commit4c2d520eeffe4c69f93f7195658f6e4877bb2ccf (patch)
treee7ffaa1118c478caaf8c30c28b435deb96972dee /sys/src/libip
parente8c1d0fe7cdfcbf0d913b5091a33a14da561f976 (diff)
fix parseip()
addresses like: "1:2:3:4:5:6:7:255.255.255.255" caused parseip to write beyond the ip buffer.
Diffstat (limited to 'sys/src/libip')
-rw-r--r--sys/src/libip/parseip.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/src/libip/parseip.c b/sys/src/libip/parseip.c
index 7856b4a6c..9f5d5dac7 100644
--- a/sys/src/libip/parseip.c
+++ b/sys/src/libip/parseip.c
@@ -74,6 +74,10 @@ parseip(uchar *to, char *from)
op = p;
x = strtoul(p, &p, 16);
if(*p == '.' || (*p == 0 && i == 0)){ /* ends with v4? */
+ if(i > IPaddrlen-4){
+ memset(to, 0, IPaddrlen);
+ return -1; /* parse error */
+ }
p = v4parseip(to+i, op);
i += 4;
break;