diff options
author | akr <akr@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-08-08 01:58:40 +0000 |
---|---|---|
committer | akr <akr@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-08-08 01:58:40 +0000 |
commit | 2577fa6dccd454fe92009b306af212e7e73bf906 (patch) | |
tree | 6392f23799c3d1dbdf379e4444c6456ad01e1746 /lib/resolv-replace.rb | |
parent | 25efcaf400610bdc55bae332617825b8114aba04 (diff) | |
download | ruby-2577fa6dccd454fe92009b306af212e7e73bf906.tar.gz |
* lib/resolv.rb: randomize source port and transaction id.
CVE-2008-1447.
* lib/resolv-replace.rb (UDPSocket#bind): don't resolv host if host is
"".
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@18424 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'lib/resolv-replace.rb')
-rw-r--r-- | lib/resolv-replace.rb | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/resolv-replace.rb b/lib/resolv-replace.rb index 5d15b4577c..63d58cea27 100644 --- a/lib/resolv-replace.rb +++ b/lib/resolv-replace.rb @@ -23,7 +23,8 @@ end class UDPSocket alias original_resolv_bind bind def bind(host, port) - original_resolv_bind(IPSocket.getaddress(host), port) + host = IPSocket.getaddress(host) if host != "" + original_resolv_bind(host, port) end alias original_resolv_connect connect |