You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by fe...@apache.org on 2005/12/03 03:38:26 UTC
svn commit: r351875 - /spamassassin/trunk/lib/Mail/SpamAssassin/NetSet.pm
Author: felicity
Date: Fri Dec 2 18:38:23 2005
New Revision: 351875
URL: http://svn.apache.org/viewcvs?rev=351875&view=rev
Log:
bug 4485: validate IP before calling my_inet_aton()
Modified:
spamassassin/trunk/lib/Mail/SpamAssassin/NetSet.pm
Modified: spamassassin/trunk/lib/Mail/SpamAssassin/NetSet.pm
URL: http://svn.apache.org/viewcvs/spamassassin/trunk/lib/Mail/SpamAssassin/NetSet.pm?rev=351875&r1=351874&r2=351875&view=diff
==============================================================================
--- spamassassin/trunk/lib/Mail/SpamAssassin/NetSet.pm (original)
+++ spamassassin/trunk/lib/Mail/SpamAssassin/NetSet.pm Fri Dec 2 18:38:23 2005
@@ -96,6 +96,7 @@
my ($self, $ip) = @_;
if (!defined $self->{nets}) { return 0; }
+ if ($ip !~ m/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/) { return 0; }
$ip = Mail::SpamAssassin::Util::my_inet_aton($ip);
foreach my $net (@{$self->{nets}}) {