diff options
| author | Florian Weimer <fweimer@redhat.com> | 2017-06-23 22:51:00 +0200 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2017-06-23 22:51:06 +0200 |
| commit | 9a0cc8c1bd7645bf3c988890ffb59639c07a5812 (patch) | |
| tree | 8de136777f54b60d406e5fcd5f64889c2e5949ea /resolv/inet_pton.c | |
| parent | fa872e1b6210e81e60d6029429f0a083b8eab26e (diff) | |
| download | glibc-9a0cc8c1bd7645bf3c988890ffb59639c07a5812.tar.gz | |
inet_pton: Reject IPv6 addresses with many leading zeros [BZ #16637]
2001:db8:00001::f is not a valid IPv6 address according to RFC 2373.
Diffstat (limited to 'resolv/inet_pton.c')
| -rw-r--r-- | resolv/inet_pton.c | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/resolv/inet_pton.c b/resolv/inet_pton.c index b95da47c17..16ee33e0c0 100644 --- a/resolv/inet_pton.c +++ b/resolv/inet_pton.c @@ -144,7 +144,8 @@ inet_pton6 (const char *src, const char *src_endp, unsigned char *dst) { unsigned char tmp[NS_IN6ADDRSZ], *tp, *endp, *colonp; const char *curtok; - int ch, saw_xdigit; + int ch; + size_t xdigits_seen; /* Number of hex digits since colon. */ unsigned int val; tp = memset (tmp, '\0', NS_IN6ADDRSZ); @@ -162,7 +163,7 @@ inet_pton6 (const char *src, const char *src_endp, unsigned char *dst) } curtok = src; - saw_xdigit = 0; + xdigits_seen = 0; val = 0; while (src < src_endp) { @@ -170,17 +171,19 @@ inet_pton6 (const char *src, const char *src_endp, unsigned char *dst) int digit = hex_digit_value (ch); if (digit >= 0) { + if (xdigits_seen == 4) + return 0; val <<= 4; val |= digit; if (val > 0xffff) return 0; - saw_xdigit = 1; + ++xdigits_seen; continue; } if (ch == ':') { curtok = src; - if (!saw_xdigit) + if (xdigits_seen == 0) { if (colonp) return 0; @@ -193,7 +196,7 @@ inet_pton6 (const char *src, const char *src_endp, unsigned char *dst) return 0; *tp++ = (unsigned char) (val >> 8) & 0xff; *tp++ = (unsigned char) val & 0xff; - saw_xdigit = 0; + xdigits_seen = 0; val = 0; continue; } @@ -201,12 +204,12 @@ inet_pton6 (const char *src, const char *src_endp, unsigned char *dst) && inet_pton4 (curtok, src_endp, tp) > 0) { tp += NS_INADDRSZ; - saw_xdigit = 0; + xdigits_seen = 0; break; /* '\0' was seen by inet_pton4. */ } return 0; } - if (saw_xdigit) + if (xdigits_seen > 0) { if (tp + NS_INT16SZ > endp) return 0; |