Re: sshd Failing New Inbound Connections

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On Mon, 21 Mar 2022, Steffen Nurpmeso wrote:

>  |> actually even standardized that "octal numbers" are not supported
> 
> ..inet_pton..

Huh. Not that but inet_aton on GNU, and other functions apparently.

This is idiotic, and I guess the same POSIX that insists on octals
for leading-zero numbers in shell, causing no small amount of bugs,
is responsible. Hmph.

>  |> 127.000.000.001 in form fields etc.

|            $ ./a.out 226.000.000.037      # Last byte is in octal

Given that these may be either decimal or octal, depending on where
they come from, it’s probably for the best to reject them.

(My RFC822-and-related-parser certainly does.)

bye,
//mirabilos
-- 
Infrastrukturexperte • tarent solutions GmbH
Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
Telephon +49 228 54881-393 • Fax: +49 228 54881-235
HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg

                        ****************************************************
/⁀\ The UTF-8 Ribbon
╲ ╱ Campaign against      Mit dem tarent-Newsletter nichts mehr verpassen:
 ╳  HTML eMail! Also,     https://www.tarent.de/newsletter
╱ ╲ header encryption!
                        ****************************************************
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev




[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux