Jan Engelhardt 4dcefe4b95 xt_geoip: fix possible out-of-bounds access ...

It is possible for geoip_bsearch() to pick mid == sizeof(subnets).

Consider a set with a single entry and a "address to test"
higher than the range:

1st call: lo = 0, hi = 1 -> mid will be 0
2nd call: lo = 1, hi = 1 -> mid will be 1

On the 2nd call, we'll examine random data.

Reported-by: Florian Westphal <fw@strlen.de>

2010-06-13 10:40:07 +02:00

6.0 KiB

Raw Permalink Blame History

View Raw