2305. [security] inet_network() buffer overflow. CVE-2008-0122.

8bc3fe51 · Mark Andrews · a7637b7d · 8bc3fe51 · 8bc3fe51
Commit 8bc3fe51 authored Jan 16, 2008 by Mark Andrews
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 2 deletions

CHANGES CHANGES +1 -0

lib/bind/inet/inet_network.c lib/bind/inet/inet_network.c +2 -2

No files found.
--- a/CHANGES
+++ b/CHANGES
+2305.	[security]	inet_network() buffer overflow. CVE-2008-0122.

 	--- 9.2.9 released ---


--- a/lib/bind/inet/inet_network.c
+++ b/lib/bind/inet/inet_network.c
@@ -84,9 +84,9 @@ again:
 	}
 	if (!digit)
 		return (INADDR_NONE);
+	if (pp >= parts + 4 || val > 0xffU)
+		return (INADDR_NONE);
 	if (*cp == '.') {
-		if (pp >= parts + 4 || val > 0xffU)
-			return (INADDR_NONE);
 		*pp++ = val, cp++;
 		goto again;
 	}