commit 330009f7b3742462ebd90f9c16f1ab734344b68c
author ajs <ajs> Tue Jul 26 14:35:37 2005 +0000
committer ajs <ajs> Tue Jul 26 14:35:37 2005 +0000
tree 9d3ddbf26da3205989e136cd2b3858c65584ef94
parent c898775c95a2aad505911eccb6a70a12d4e49f1d

2005-07-26 Andrew J. Schorr <ajschorr@alumni.princeton.edu>

	* prefix.c: (ip_masklen) While loop should test that 'pnt' pointer is
	  in range before dereferencing it.

	[backport candidate]

lib/prefix.c

diff --git a/lib/prefix.c b/lib/prefix.c
index b4347dd..1806ac4 100644
--- a/lib/prefix.c
+++ b/lib/prefix.c
@@ -292,7 +292,7 @@
   pnt = (u_char *) &netmask;
   end = pnt + 4;
 
-  while ((*pnt == 0xff) && pnt < end)
+  while ((pnt < end) && (*pnt == 0xff))
     {
       len+= 8;
       pnt++;