4 Commits

Author	SHA1	Message	Date
Jakub Jelen	72f59157e6	Fix regression in IPv6 addresses in hostname parsing ... Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org> (cherry picked from commit 4f997aee7c)	2023-12-22 13:10:59 +01:00
Norbert Pocs	4d7ae19e9c	CVE-2023-6004: config_parser: Check for valid syntax of a hostname if it is a domain name ... This prevents code injection. The domain name syntax checker is based on RFC1035. Signed-off-by: Norbert Pocs <norbertpocs0@gmail.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>	2023-12-18 17:57:27 +01:00
Norbert Pocs	c3234e5f94	CVE-2023-6004: config_parser: Allow multiple '@' in usernames ... Signed-off-by: Norbert Pocs <norbertpocs0@gmail.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>	2023-12-18 17:57:27 +01:00
Anderson Toshiyuki Sasaki	79049981a5	config: Move common parser functions to config_parser.c ... This will allow the moved functions to be used in the server side configuration parser implementation. Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>	2019-04-01 08:25:22 +02:00