[lwip-devel] [bug #19225] bind, connect, and sendto should verify input paramers

[Dmitry Potapov]

URL:
  <http://savannah.nongnu.org/bugs/?19225>

                 Summary: bind, connect, and sendto should verify input
paramers
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: dpotapov
            Submitted on: Wednesday 03/07/2007 at 07:36
                Category: sockets
                Severity: 3 - Normal
              Item Group: Faulty Behaviour
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

I have attached the patch, which check namelen and sin_family in the
aformentioned functions

  if ((namelen != sizeof(struct sockaddr_in)) ||
      ((((struct sockaddr_in *)name)->sin_family) != AF_INET)) {
    sock_set_errno(sock, EINVAL);
    return -1;
  }




    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Wednesday 03/07/2007 at 07:36  Name: socket-inaddr-check.patch  Size:
1kB   By: dpotapov

<http://savannah.nongnu.org/bugs/download.php?file_id=12137>

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?19225>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/