Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-06 Thread James Yonan
Peter Rabbitson wrote: James Yonan wrote: Peter Rabbitson wrote: James Yonan wrote: Peter Rabbitson wrote: Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything come

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-06 Thread James Yonan
Peter Rabbitson wrote: James Yonan wrote: Peter Rabbitson wrote: James Yonan wrote: Peter Rabbitson wrote: Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything come

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-05 Thread Peter Rabbitson
James Yonan wrote: > > > Peter Rabbitson wrote: >> James Yonan wrote: >>> Peter Rabbitson wrote: >> Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything com

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-05 Thread Peter Rabbitson
James Yonan wrote: > > > Peter Rabbitson wrote: >> James Yonan wrote: >>> Peter Rabbitson wrote: >> Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything com

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-04 Thread James Yonan
Peter Rabbitson wrote: James Yonan wrote: Peter Rabbitson wrote: Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything comes back - use the result as the routed IPs.

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-08-21 Thread Peter Rabbitson
James Yonan wrote: > Peter Rabbitson wrote: >> >> Eventually the best way to deal with this is to test for >> ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns >> lookup on the string supplied for route. If anything comes back - use >> the result as the routed IPs. Otherwise war

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-08-21 Thread James Yonan
Peter Rabbitson wrote: Hello, I would like to duplicate a concern about the proposed fix, voiced over at the debian BTS http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493488#29, before the final version ships. = This fix breaks the follo