Revision 1a18454d - getaddrinfo.c: GHOST vulnerability check * ext/socket/getaddrinfo.c (get_add... - Ruby - Ruby Issue Tracking System

« Previous | Next »

Revision 1a18454d

Added by nobu (Nobuyoshi Nakada) over 10 years ago

ID 1a18454da9bd4be564cf5df21dc2b53787527168
Parent a6516ff5
Child 1a98f56a

getaddrinfo.c: GHOST vulnerability check

ext/socket/getaddrinfo.c (get_addr): reject too long hostname to
get rid of GHOST vulnerability on very old platforms.
ext/socket/raddrinfo.c (make_hostent_internal): ditto, paranoic
check for the canonnical name.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@49543 b2dd03c8-39d4-4d8f-98ff-823fe69b080e