New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ftp: reject illegal IPport in PASV 227 response #1997

Closed
wants to merge 1 commit into
base: master
from

Conversation

Projects
None yet
1 participant
@bagder
Member

bagder commented Oct 19, 2017

... by using range checks. Among other things, this avoids an undefined
behavior for a left shift that could happen on negative or very large
values.

Detected by OSS-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3694

ftp: reject illegal IPport in PASV 227 response
... by using range checks. Among other things, this avoids an undefined
behavior for a left shift that could happen on negative or very large
values.

Detected by OSS-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3694

@bagder bagder added the FTP label Oct 19, 2017

@bagder bagder closed this in 769647e Oct 20, 2017

@bagder bagder deleted the bagder/ftp-illegal-PASV-host branch Oct 21, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment