net: add bound checking in net_addr_pton()

The net_addr_pton() did not check the number of ":" characters properly. For example with following net-shell input net ping fe80::210:2030:9b:d48efe80::210:2030:9b:d48e the kernel panics. Signed-off-by: Walter Xie <[email protected]>
bearsh · Jul 5, 2018 · 354c50e · 354c50e
1 parent 3712578
commit 354c50e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/subsys/net/ip/utils.c b/subsys/net/ip/utils.c
@@ -344,6 +344,10 @@ int net_addr_pton(sa_family_t family, const char *src,
 				if (*tmp == ':') {
 					i--;
 				}
+
+				if (i < 0) {
+					return -EINVAL;
+				}
 			} while (tmp-- != src);
 
 			src++;