CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2014/06/22 08:41:10
Modified files:
lib/libssl/src/crypto/bio: b_sock.c bio.h bio_err.c
Log message:
In BIO_get_port(), use strol() with appropriate range checks rather than
an atoi() followed by an unsigned short cast. This stops things like "-1"
and "66536" from being considered to be "valid" port numbers.
ok beck@ deraadt@
