From: Steinar H. Gunderson <sesse@google.com>
Date: Sat, 29 Sep 2007 13:52:14 +0000 (+0000)
Subject: Be stricter about what's a valid IP address in fake_hostent. (Patch from the Google... 
X-Git-Tag: curl-7_17_1~165
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9fc66e4dd966f18a8dbe7f251ab2a791dc8b8f23;p=curl

Be stricter about what's a valid IP address in fake_hostent. (Patch from the Google tree.)
---

diff --git a/ares/ares_gethostbyname.c b/ares/ares_gethostbyname.c
index 49ae53ed3..7a4aad6e3 100644
--- a/ares/ares_gethostbyname.c
+++ b/ares/ares_gethostbyname.c
@@ -209,7 +209,27 @@ static int fake_hostent(const char *name, int family, ares_host_callback callbac
   struct in6_addr in6;
 
   if (family == AF_INET)
-    result = ((in.s_addr = inet_addr(name)) == INADDR_NONE ? 0 : 1);
+    {
+      /* It only looks like an IP address if it's all numbers and dots. */
+      int numdots = 0;
+      const char *p;
+      for (p = name; *p; p++)
+        {
+          if (!isdigit(*p) && *p != '.') {
+            return 0;
+          } else if (*p == '.') {
+            numdots++;
+          }
+        }
+    
+      /* if we don't have 3 dots, it is illegal 
+       * (although inet_addr doesn't think so).
+       */
+      if (numdots != 3)
+        result = 0;
+      else
+        result = ((in.s_addr = inet_addr(name)) == INADDR_NONE ? 0 : 1);
+    }
   else if (family == AF_INET6)
     result = (ares_inet_pton(AF_INET6, name, &in6) < 1 ? 0 : 1);