Package: spfquery Version: 1.2.5.dfsg-2 Severity: normal Tags: patch --- Please enter the report below this line. ---
The sqlquery tool does not validate ip6 addresses it just syntaxchecks against ip4 adresses. The attached patch fixes this. --- System information. --- Architecture: i386 Kernel: Linux 2.6.16.19 Debian Release: lenny/sid 500 unstable www.debian-multimedia.org 500 unstable ftp.dolphins.ch 500 unstable ftp.ch.debian.org --- Package information. --- Depends (Version) | Installed ========================-+-=========== libc6 (>= 2.6-1) | 2.6.1-1+b1 libspf2-2 (>= 1.2.5) | 1.2.5.dfsg-2 -- Matthias Cramer / mc322-ripe System & Network Manager Interway Communication GmbH Phone +41 43 500 1111 Josefstrasse 225 Fax +41 44 271 3535 CH-8005 Zürich http://www.interway.ch/ GnuPG 1024D/2D208250 = DBC6 65B6 7083 1029 781E 3959 B62F DF1C 2D20 8250
--- libspf2-1.2.5.orig/src/spfquery/spfquery.c 2005-02-22 03:36:55.000000000 +0100 +++ libspf2-1.2.5.dfsg/src/spfquery/spfquery.c 2007-08-30 09:39:32.000000000 +0200 @@ -604,7 +602,7 @@ spf_request = SPF_request_new(spf_server); - if (SPF_request_set_ipv4_str(spf_request, req->ip)) { + if (SPF_request_set_ipv4_str(spf_request, req->ip) && SPF_request_set_ipv6_str(spf_request, req->ip)) { printf( "Invalid IP address.\n" ); CONTINUE_ERROR;
signature.asc
Description: OpenPGP digital signature