diff options
| author | Henrik Persson <Henrik.Persson@verisure.com> | 2019-03-18 11:58:24 +0000 |
|---|---|---|
| committer | Daniel Wagner <wagi@monom.org> | 2019-03-18 20:11:54 +0100 |
| commit | 516af0fd1586e1b78763b905d1136918ddd986f8 (patch) | |
| tree | 6b75c367e66d5d722100d993ce9da05e6a553d0f /AUTHORS | |
| parent | c1debcac758ef1f76a788225679003e2e67d9fdf (diff) | |
| download | connman-516af0fd1586e1b78763b905d1136918ddd986f8.tar.gz | |
service: Sanitize input for hostname and domainname
If a DHCP ACK is received with non-UTF-8 data set as hostname or
domain-name option connman will crash on a D-Bus assert. This patch
sanitizes data in service.c and only allows ASCII characters (since
they shouldn't be anything else) for __connman_service_set_hostname()
and __connman_service_set_domainname().
Since the fix involves using g_str_is_ascii() we also need to bump
Glib dependency to 2.40 (which was released in March 2014).
See also
- IETF RFC 1123 ⟨http://www.ietf.org/rfc/rfc1123.txt⟩
- IETF RFC 1178 ⟨http://www.ietf.org/rfc/rfc1178.txt⟩
Diffstat (limited to 'AUTHORS')
0 files changed, 0 insertions, 0 deletions