[Bug 2227] New: ether_aton() accepts malformed input

[bugzilla at busybox.net]

https://bugs.busybox.net/show_bug.cgi?id=2227

           Summary: ether_aton() accepts malformed input
           Product: uClibc
           Version: 0.9.31
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Networking
        AssignedTo: unassigned at uclibc.org
        ReportedBy: ramos at cs.stanford.edu
                CC: uclibc-cvs at uclibc.org
   Estimated Hours: 0.0


Created attachment 2245
  --> https://bugs.busybox.net/attachment.cgi?id=2245
testcase for ether_aton

As of 0.9.31, ether_aton() accepts malformed input by performing an unchecked
OR \x20 as an efficient alternative to tolower(). For example, ASCII control
character \x12 (malformed input) is treated by ether_aton as an ASCII '2'
(\x32) character. It should instead return NULL to indicate the error.

I've attached a testcase to illustrate the bug.

Note that the behavior was correct in uClibc 0.9.30.3.

-- 
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.