020abc885
Denys Vlasenko
2020-01-14
Subject
udhcpd: mangle hostnames starting with dash ("-option")
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
networking/udhcp/dhcpd.c+2 -0
| @@ -192,6 +192,8 @@ static struct dyn_lease *add_lease( | |
| * but merely make dumpleases output safe for shells to use. | |
| * We accept "0-9A-Za-z._-", all other chars turn to dots. | |
| */ | |
| + | if (*p == '-') |
| + | *p = '.'; /* defeat "-option" attacks too */ |
| while (*p) { | |
| if (!isalnum(*p) && *p != '-' && *p != '_') | |
| *p = '.'; | |