[PATCH] nss: reject invalid port passed to getaddrinfo [BZ #16208]

Andreas Schwab schwab@linux-m68k.org
Sat Sep 7 07:46:48 GMT 2024


On Sep 07 2024, Antonio Quartulli wrote:

> Specifically, the string is converted to int by calling strtoul()

That step should also be checked for overflow.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 7578 EB47 D4E5 4D69 2510  2552 DF73 E780 A9DA AEC1
"And now for something completely different."


More information about the Libc-alpha mailing list