projects
/
ircu2.10.12-pk.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
ipmask_parse: Reject a full IPv6 address followed by ::.
[ircu2.10.12-pk.git]
/
ircd
/
ircd_string.c
diff --git
a/ircd/ircd_string.c
b/ircd/ircd_string.c
index a9d945138aed394032ca597bb9d291b1d79e625f..ed0349ea45fc20b1d8700cc80c355b82317c0603 100644
(file)
--- a/
ircd/ircd_string.c
+++ b/
ircd/ircd_string.c
@@
-481,12
+481,14
@@
ircd_aton_ip4(const char *input, unsigned int *output, unsigned char *pbits)
*pbits = bits;
return pos;
case '.':
*pbits = bits;
return pos;
case '.':
+ if (++dots > 3)
+ return 0;
if (input[++pos] == '.')
return 0;
if (input[++pos] == '.')
return 0;
- ip |= part << (
24 - 8 * dots++
);
+ ip |= part << (
32 - 8 * dots
);
part = 0;
if (input[pos] == '*') {
part = 0;
if (input[pos] == '*') {
- while (input[++pos] == '*') ;
+ while (input[++pos] == '*'
|| input[pos] == '.'
) ;
if (input[pos] != '\0')
return 0;
if (pbits)
if (input[pos] != '\0')
return 0;
if (pbits)
@@
-576,6
+578,8
@@
ipmask_parse(const char *input, struct irc_in_addr *ip, unsigned char *pbits)
if (input[pos] == ':') {
if (colon < 8)
return 0;
if (input[pos] == ':') {
if (colon < 8)
return 0;
+ if (ii == 8)
+ return 0;
colon = ii;
pos++;
}
colon = ii;
pos++;
}
@@
-604,9
+608,11
@@
ipmask_parse(const char *input, struct irc_in_addr *ip, unsigned char *pbits)
*pbits = part;
goto finish;
case '*':
*pbits = part;
goto finish;
case '*':
- while (input[++pos] == '*') ;
+ while (input[++pos] == '*'
|| input[pos] == ':'
) ;
if (input[pos] != '\0' || colon < 8)
return 0;
if (input[pos] != '\0' || colon < 8)
return 0;
+ if (part && ii < 8)
+ ip->in6_16[ii++] = htons(part);
if (pbits)
*pbits = ii * 16;
return pos;
if (pbits)
*pbits = ii * 16;
return pos;
@@
-620,6
+626,8
@@
ipmask_parse(const char *input, struct irc_in_addr *ip, unsigned char *pbits)
default:
return 0;
}
default:
return 0;
}
+ if (input[pos] != '\0')
+ return 0;
finish:
if (colon < 8) {
unsigned int jj;
finish:
if (colon < 8) {
unsigned int jj;