summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_srvr.c
diff options
context:
space:
mode:
authorflorian <>2021-01-19 16:43:44 +0000
committerflorian <>2021-01-19 16:43:44 +0000
commit11fb2101811061cab904382a8a9392a1451bc040 (patch)
treeab34a192f1f66619f942099a65504d0d55b6001c /src/lib/libssl/ssl_srvr.c
parentd5a424e282cee10e2123a6454e4ab9c6df85724d (diff)
downloadopenbsd-11fb2101811061cab904382a8a9392a1451bc040.tar.gz
openbsd-11fb2101811061cab904382a8a9392a1451bc040.tar.bz2
openbsd-11fb2101811061cab904382a8a9392a1451bc040.zip
Prevent an overflow in inet_net_pton(3) when the passed in buffer is
too small in the AF_INET6 case. Spotted by Brad House (brad AT brad-house.com) with the c-ares regression test. The man page says Caution: The dst field should be zeroed before calling inet_net_pton() as the function will only fill the number of bytes necessary to encode the network number in network byte order. Which seems to suggest that the function should work if the passed in storage is big enough to hold the prefix, which might be smaller than sizeof(in6_addr). Input & OK tb
Diffstat (limited to 'src/lib/libssl/ssl_srvr.c')
0 files changed, 0 insertions, 0 deletions