udhcpd: mangle hostnames starting with dash ("-option")
function old new delta add_lease 316 328 +12 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
parent
9ec836c033
commit
020abc8856
@ -192,6 +192,8 @@ static struct dyn_lease *add_lease(
|
||||
* but merely make dumpleases output safe for shells to use.
|
||||
* We accept "0-9A-Za-z._-", all other chars turn to dots.
|
||||
*/
|
||||
if (*p == '-')
|
||||
*p = '.'; /* defeat "-option" attacks too */
|
||||
while (*p) {
|
||||
if (!isalnum(*p) && *p != '-' && *p != '_')
|
||||
*p = '.';
|
||||
|
Loading…
x
Reference in New Issue
Block a user