getaddrinfo security problem ?

[Thorsten Kukuk]

On Fri, May 18, Thorsten Kukuk wrote:

> I don't know if it is correct to return AF_UNIX with a path in
> /tmp. I think this is a very bad idea, and for me it looks like
> glibc should not do this. I cannot find any other implementation
> where AF_UNIX is returned, looks like only glibc is doing this.
> 
> Any other opiniums ? What does the standard say about this ?
> I think we should disable it.

If I look at the various source codes:

We can remove PF_LOCAL and gaih_local, or we don't allow PF_LOCAL
if PF_UNSPEC is set. I would vote for the first option, removing
it completly like BSD has done this.

Any other ideas ?

  Thorsten

-- 
Thorsten Kukuk       http://www.suse.de/~kukuk/        kukuk@suse.de
SuSE GmbH            Deutschherrnstr. 15-19          90429 Nuernberg
--------------------------------------------------------------------    
Key fingerprint = A368 676B 5E1B 3E46 CFCE  2D97 F8FD 4E23 56C6 FB4B