[PATCH] check that last IPv4 octet has valid value
Ruslan Ermilov
ru at nginx.com
Tue Apr 28 15:56:23 UTC 2015
On Tue, Apr 28, 2015 at 06:31:06PM +0300, Ruslan Ermilov wrote:
> On Tue, Apr 28, 2015 at 06:12:01PM +0300, Sergey Polovko wrote:
> > # HG changeset patch
> > # User Sergey Polovko <jamel at yandex-team.ru>
> > # Date 1430232559 -10800
> > # Tue Apr 28 17:49:19 2015 +0300
> > # Node ID e98e249441adc75c525556ca32e9f3e65e87f653
> > # Parent 96e22e4f1b03ff15a774c6ed34d74b897af32c55
> > check that last IPv4 octet has valid value
> >
> > diff -r 96e22e4f1b03 -r e98e249441ad src/core/ngx_inet.c
> > --- a/src/core/ngx_inet.c Mon Apr 27 18:51:18 2015 +0300
> > +++ b/src/core/ngx_inet.c Tue Apr 28 17:49:19 2015 +0300
> > @@ -48,7 +48,7 @@
> > return INADDR_NONE;
> > }
> >
> > - if (n == 3) {
> > + if (n == 3 && octet <= 255) {
> > addr = (addr << 8) + octet;
> > return htonl(addr);
> > }
>
> http://hg.nginx.org/nginx/rev/550212836c8f
Sorry :) here's the correct linkЖ
http://hg.nginx.org/nginx/rev/bc47a7a8159c
More information about the nginx-devel
mailing list