Attachment 583997 Details for Bug 820677 – Proposed sudo-v1.8.x patch from Todd C.Miller

[patch] Proposed sudo-v1.8.x patch from Todd C.Miller

match_addr.c.diff (text/plain), 1.06 KB, created by Jan Lieskovsky on 2012-05-12 12:58:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Lieskovsky

Created: 2012-05-12 12:58:34 UTC

Size: 1.06 KB

patch

obsolete

>--- match_addr.c	Thu May 10 15:05:33 2012
>+++ match_addr.c.CVE-2012-2337	Thu May 10 14:02:48 2012
>@@ -74,7 +74,7 @@
>     for (ifp = interfaces; ifp != NULL; ifp = ifp->next) {
> 	if (ifp->family != family)
> 	    continue;
>-	switch(family) {
>+	switch (family) {
> 	    case AF_INET:
> 		if (ifp->addr.ip4.s_addr == addr.ip4.s_addr ||
> 		    (ifp->addr.ip4.s_addr & ifp->netmask.ip4.s_addr)
>@@ -92,6 +92,7 @@
> 		}
> 		if (j == sizeof(addr.ip6.s6_addr))
> 		    debug_return_bool(true);
>+		break;
> #endif /* HAVE_STRUCT_IN6_ADDR */
> 	}
>     }
>@@ -156,10 +157,11 @@
>     for (ifp = interfaces; ifp != NULL; ifp = ifp->next) {
> 	if (ifp->family != family)
> 	    continue;
>-	switch(family) {
>+	switch (family) {
> 	    case AF_INET:
> 		if ((ifp->addr.ip4.s_addr & mask.ip4.s_addr) == addr.ip4.s_addr)
> 		    debug_return_bool(true);
>+		break;
> #ifdef HAVE_STRUCT_IN6_ADDR
> 	    case AF_INET6:
> 		for (j = 0; j < sizeof(addr.ip6.s6_addr); j++) {
>@@ -168,6 +170,7 @@
> 		}
> 		if (j == sizeof(addr.ip6.s6_addr))
> 		    debug_return_bool(true);
>+		break;
> #endif /* HAVE_STRUCT_IN6_ADDR */
> 	}
>     }

Actions: View | Diff

Attachments on bug 820677: 583996 | 583997