[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[or-cvs] [tor/master] Fix a strdup() of uninitialized buffer in addressmap_get_virtual_address



Author: Nick Mathewson <nickm@xxxxxxxxxxxxxx>
Date: Thu, 6 Jan 2011 13:40:27 -0500
Subject: Fix a strdup() of uninitialized buffer in addressmap_get_virtual_address
Commit: 3bc235d97975dfa17ca6732a930b28124b92eef5

Partial revert of 22f723e4a3fc32983480c7403af9d7e77a3200ea.

Bugfix on 0.2.3.0-alpha
---
 src/or/connection_edge.c |    5 ++++-
 1 files changed, 4 insertions(+), 1 deletions(-)

diff --git a/src/or/connection_edge.c b/src/or/connection_edge.c
index 8bfc8b4..463d020 100644
--- a/src/or/connection_edge.c
+++ b/src/or/connection_edge.c
@@ -1200,6 +1200,7 @@ addressmap_get_virtual_address(int type)
   } else if (type == RESOLVED_TYPE_IPV4) {
     // This is an imperfect estimate of how many addresses are available, but
     // that's ok.
+    struct in_addr in;
     uint32_t available = 1u << (32-virtual_addr_netmask_bits);
     while (available) {
       /* Don't hand out any .0 or .255 address. */
@@ -1211,7 +1212,9 @@ addressmap_get_virtual_address(int type)
           return NULL;
         }
       }
-      if (!strmap_get(addressmap, fmt_addr32(next_virtual_addr))) {
+      in.s_addr = htonl(next_virtual_addr);
+      tor_inet_ntoa(&in, buf, sizeof(buf));
+      if (!strmap_get(addressmap, buf)) {
         ++next_virtual_addr;
         break;
       }
-- 
1.7.1