Bugzilla – Attachment 1367 Details for
Bug 1380
incorrect check for strlen(fwd->connect_host) in parse_forward()
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
fix for the bug
listen_host-len-check.patch (text/plain), 797 bytes, created by
Jan Pechanec
on 2007-10-23 04:27:25 AEST
(
hide
)
Description:
fix for the bug
Filename:
MIME Type:
Creator:
Jan Pechanec
Created:
2007-10-23 04:27:25 AEST
Size:
797 bytes
patch
obsolete
>--- readconf.c Mon Oct 22 20:02:09 2007 >+++ readconf.c.new Mon Oct 22 20:19:05 2007 >@@ -1258,10 +1258,6 @@ > if (fwd->listen_port == 0 && fwd->connect_port == 0) > goto fail_free; > >- if (fwd->connect_host != NULL && >- strlen(fwd->connect_host) >= NI_MAXHOST) >- goto fail_free; >- > return (i); > > fail_free: >--- channels.c Mon Oct 22 20:01:35 2007 >+++ channels.c.new Mon Oct 22 20:20:41 2007 >@@ -2525,6 +2525,12 @@ > if (num_permitted_opens >= SSH_MAX_FORWARDS_PER_DIRECTION) > fatal("channel_request_remote_forwarding: too many forwards"); > >+ if (listen_host != NULL && >+ strlen(listen_host) > SSH_CHANNEL_PATH_LEN - 1) { >+ error("Binding address too long."); >+ return 0; >+ } >+ > /* Send the forward request to the remote side. */ > if (compat20) { > const char *address_to_bind;
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=1367">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 1380
:
1367
|
1539
|
1540
|
1591