diff options
| author | naruse <naruse@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2015-02-15 04:16:03 +0000 |
|---|---|---|
| committer | naruse <naruse@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2015-02-15 04:16:03 +0000 |
| commit | 4aacaf216c64be1c45983aa992c8f4f9160ba6c7 (patch) | |
| tree | d30e13dc577d21e919394c026f2a928d027d6b30 /ChangeLog | |
| parent | 43defa70006d957574578503365fef8d4d18c646 (diff) | |
merge revision(s) 49543: [Backport #10854]
* ext/socket/getaddrinfo.c (get_addr): reject too long hostname to
get rid of GHOST vulnerability on very old platforms.
* ext/socket/raddrinfo.c (make_hostent_internal): ditto, paranoic
check for the canonnical name.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_2@49605 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -1,3 +1,11 @@ +Sun Feb 15 13:15:46 2015 Nobuyoshi Nakada <nobu@ruby-lang.org> + + * ext/socket/getaddrinfo.c (get_addr): reject too long hostname to + get rid of GHOST vulnerability on very old platforms. + + * ext/socket/raddrinfo.c (make_hostent_internal): ditto, paranoic + check for the canonnical name. + Sat Feb 14 13:27:41 2015 Nobuyoshi Nakada <nobu@ruby-lang.org> * vm_eval.c (send_internal), vm_insnhelper.c (vm_call_opt_send): |