[PATCH] check that last IPv4 octet has valid value
Ruslan Ermilov
ru at nginx.com
Tue Apr 28 15:31:06 UTC 2015
On Tue, Apr 28, 2015 at 06:12:01PM +0300, Sergey Polovko wrote:
> # HG changeset patch
> # User Sergey Polovko <jamel at yandex-team.ru>
> # Date 1430232559 -10800
> # Tue Apr 28 17:49:19 2015 +0300
> # Node ID e98e249441adc75c525556ca32e9f3e65e87f653
> # Parent 96e22e4f1b03ff15a774c6ed34d74b897af32c55
> check that last IPv4 octet has valid value
>
> diff -r 96e22e4f1b03 -r e98e249441ad src/core/ngx_inet.c
> --- a/src/core/ngx_inet.c Mon Apr 27 18:51:18 2015 +0300
> +++ b/src/core/ngx_inet.c Tue Apr 28 17:49:19 2015 +0300
> @@ -48,7 +48,7 @@
> return INADDR_NONE;
> }
>
> - if (n == 3) {
> + if (n == 3 && octet <= 255) {
> addr = (addr << 8) + octet;
> return htonl(addr);
> }
http://hg.nginx.org/nginx/rev/550212836c8f
More information about the nginx-devel
mailing list