sshd Failing New Inbound Connections
Thorsten Glaser
t.glaser at tarent.de
Tue Mar 22 06:08:01 AEDT 2022
On Mon, 21 Mar 2022, Steffen Nurpmeso wrote:
> |> actually even standardized that "octal numbers" are not supported
>
> ..inet_pton..
Huh. Not that but inet_aton on GNU, and other functions apparently.
This is idiotic, and I guess the same POSIX that insists on octals
for leading-zero numbers in shell, causing no small amount of bugs,
is responsible. Hmph.
> |> 127.000.000.001 in form fields etc.
| $ ./a.out 226.000.000.037 # Last byte is in octal
Given that these may be either decimal or octal, depending on where
they come from, it’s probably for the best to reject them.
(My RFC822-and-related-parser certainly does.)
bye,
//mirabilos
--
Infrastrukturexperte • tarent solutions GmbH
Am Dickobskreuz 10, D-53121 Bonn • http://www.tarent.de/
Telephon +49 228 54881-393 • Fax: +49 228 54881-235
HRB AG Bonn 5168 • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
****************************************************
/⁀\ The UTF-8 Ribbon
╲ ╱ Campaign against Mit dem tarent-Newsletter nichts mehr verpassen:
╳ HTML eMail! Also, https://www.tarent.de/newsletter
╱ ╲ header encryption!
****************************************************
More information about the openssh-unix-dev
mailing list