-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/28/2011 01:43 AM, Thierry Besancon wrote: > On 2011-11-27 13:26:43, jdow wrote: >> Which browser(s) treat addresses of the form >> 178.000235.0000150.000372 as actual addresses? That seems like a >> serious fault in the browsers. > > According to C standards, a number beginning with a 0 is an base 8 > number. > > So 000235 is legal. It means 157 in decimal. So 000150 is legal. It > means 104 in decimal. So 000372 is legal. It means 250 in decimal. > > So this is address 178.157.104.250 which is a legal IP address. > > So there is no serious fault. Just your ignorance of C programming > ;-) > > Best regards, Thierry Besancon
use of octal numbers in the dotted IPv4 address is against the URI specification standard. C standards are not relevant to the URI standard (see section 7.4. in rfc3986). according to rfc3986 section 3.2.2, only one form of dotted IPv4 formats are allowed: that's the dotted decimals. section 7.4 in rfc3986 does mention some security considerations. - -- Regards, Mahmoud Khonji PGP Key: 0x92584ECA -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJO0ruqAAoJEFzU5FSSWE7KPeQIAI3GbWHP/H0HUSEfu3PCoimy v0VsdRDRisfqn1iPbJc7+8wofbXTDUdYCdbqYf4UHhG3ECSYg9gta39FFkg4TpOi BEYPQroZrtqY0/fM2txvu1Z5FWe0IStKtkixhPWo1fzUxpXfuFrBkGW3cVWmSoBn aP5Cjsrbb+awbnsFUpIypzxAGymRi+09a9eJQPhIrstwWX8acch4G4bKbltLUZDi FXDosdOXJpVLvy567fjCrLAW7a5+xPSEjSoXHTRfcxwzT3SLLGMo8FZfyLbf+VbM WbrbrBJyzXi5ZLoOpm93YlkoWo5rcYT8KPxMAHRMRCzXTMeu65XEoimZOzJS9HU= =Evqe -----END PGP SIGNATURE-----
