From a258f9b594a5e039007036b2254ed6cec58ffcaa Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Tue, 18 Mar 2008 18:51:42 +0000 Subject: r18938@catbus: nickm | 2008-03-18 14:51:30 -0400 Backport: Fix the other lingering part of bug 617: make ClientDNSRejectInternalAddresses actually work. svn:r14108 --- src/or/connection_edge.c | 13 +++++++++++-- src/or/dns.c | 3 ++- src/or/or.h | 1 + 3 files changed, 14 insertions(+), 3 deletions(-) (limited to 'src') diff --git a/src/or/connection_edge.c b/src/or/connection_edge.c index 27dc4d05f5..ee60dbff5a 100644 --- a/src/or/connection_edge.c +++ b/src/or/connection_edge.c @@ -1328,8 +1328,17 @@ connection_ap_handshake_rewrite_and_attach(edge_connection_t *conn, if (options->ClientDNSRejectInternalAddresses) { /* Don't let people try to do a reverse lookup on 10.0.0.1. */ tor_addr_t addr; - if (tor_addr_from_str(&addr, socks->address) >= 0 && - tor_addr_is_internal(&addr, 0)) { + struct in_addr in; + int ok; + if (!strcasecmpend(socks->address, ".in-addr.arpa")) + ok = !parse_inaddr_arpa_address(socks->address, &in); + else + ok = tor_inet_aton(socks->address, &in); + /*XXXX021 make this a function. */ + addr.family = AF_INET; + memcpy(&addr.addr.in_addr, &in, sizeof(struct in_addr)); + + if (ok && tor_addr_is_internal(&addr, 0)) { connection_ap_handshake_socks_resolved(conn, RESOLVED_TYPE_ERROR, 0, NULL, -1, TIME_MAX); connection_mark_unattached_ap(conn, diff --git a/src/or/dns.c b/src/or/dns.c index bb932450f5..e6347c5e00 100644 --- a/src/or/dns.c +++ b/src/or/dns.c @@ -481,7 +481,8 @@ send_resolved_hostname_cell(edge_connection_t *conn, const char *hostname) * parse it and place the address in in if present. Return 1 on success; * 0 if the address is not in in-addr.arpa format, and -1 if the address is * malformed. */ -static int +/* XXXX021 move this to util.c. */ +int parse_inaddr_arpa_address(const char *address, struct in_addr *in) { char buf[INET_NTOA_BUF_LEN]; diff --git a/src/or/or.h b/src/or/or.h index a8a7898523..d4b8e5d3e5 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3235,6 +3235,7 @@ int dns_resolve(edge_connection_t *exitconn); void dns_launch_correctness_checks(void); int dns_seems_to_be_broken(void); void dns_reset_correctness_checks(void); +int parse_inaddr_arpa_address(const char *address, struct in_addr *in); /********************************* dnsserv.c ************************/ -- cgit v1.2.3-54-g00ecf