Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-05 Thread Peter Rabbitson
James Yonan wrote: > > > Peter Rabbitson wrote: >> James Yonan wrote: >>> Peter Rabbitson wrote: >> Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything com

Re: [Openvpn-devel] Followup to CVE-2008-3459 fix

2008-09-05 Thread Peter Rabbitson
James Yonan wrote: > > > Peter Rabbitson wrote: >> James Yonan wrote: >>> Peter Rabbitson wrote: >> Eventually the best way to deal with this is to test for ip_addr_dotted_quad_safe and is_special_addr, and then attempt a dns lookup on the string supplied for route. If anything com