<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3314" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=910394517-07082008><FONT face=Arial
size=2>1.2</FONT></SPAN></DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial size=2>in the permissions
module, the allow_address function passes the value of the parameter variable to
inet_aton but it doesn't respect "len" of the string.</FONT></SPAN></DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial size=2>i call the function
as</FONT></SPAN></DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial size=2>allow_address("$rd",
"$rp")</FONT></SPAN></DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=910394517-07082008><FONT face=Arial size=2>since it doesnt
respect the length of the string, it ends up calling inet_aton with ip +
port</FONT></SPAN></DIV></BODY></HTML>