From f267e40f9679fec02a3166577c78cb290017b7e3 Mon Sep 17 00:00:00 2001 From: Chris Packham Date: Wed, 4 Jan 2017 13:36:26 +1300 Subject: [PATCH] lib: net_utils: enforce '.' as octet separator in string_to_ip Ensure '.' is used to separate octets. If another character is seen reject the string outright and return 0.0.0.0. Signed-off-by: Chris Packham --- lib/net_utils.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/net_utils.c b/lib/net_utils.c index 8f81e78010..d06be22849 100644 --- a/lib/net_utils.c +++ b/lib/net_utils.c @@ -28,6 +28,10 @@ struct in_addr string_to_ip(const char *s) addr.s_addr = 0; return addr; } + if (i != 3 && *e != '.') { + addr.s_addr = 0; + return addr; + } addr.s_addr <<= 8; addr.s_addr |= (val & 0xFF); if (s) { -- 2.25.1