[Bug 238581] New: careless use of gethostbyname() in Socket.xs

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238581

           Summary: careless use of gethostbyname() in Socket.xs
           Product: Fedora Core
           Version: fc5
          Platform: All
               URL: http://rt.perl.org/rt3/Public/Bug/Display.html?id=42844
        OS/Version: Linux
            Status: NEW
          Severity: low
          Priority: medium
         Component: perl
        AssignedTo: rnorwood at redhat.com
        ReportedBy: peak at argo.troja.mff.cuni.cz
         QAContact: dkl at redhat.com
                CC: fedora-perl-devel-list at redhat.com


Description of problem:
Socket::inet_aton() does not the length of data returned by gethostbyname()
before copying it. See the link to PerlBug for details.

Version-Release number of selected component (if applicable):
5.8.8-4 (other versions are affected as well)

How reproducible:
Easily when you LD_PRELOAD a broken implementation of gethostbyname(). :)

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.