2
0
mirror of https://github.com/flotwig/spoofident synced 2025-08-22 01:57:44 +00:00

Fixing possible crash scenario with malformed port sequences

This commit is contained in:
Zach Bloomquist 2014-06-16 14:47:03 -04:00
parent c8257b82c3
commit 23f7d8ff72

View File

@ -5,17 +5,22 @@ def handleIdent(fd):
data=fd.recv(1024).strip()
ports=data.split(',',2)
ports=map(validPort,ports)
if not ports[1] or not ports[0]:
fd.sendall('0 , 0 : ERROR : INVALID-PORT')
return
fd.sendall(data + ' : USERID : '+settings['os']+' : '+settings['user'])
if not ports[0] or not ports[1]:
fd.send('0 , 0 : ERROR : INVALID-PORT')
else:
fd.send(data + ' : USERID : '+settings['os']+' : '+settings['user'])
fd.send('\r\n')
fd.close()
def validPort(port):
port=int(port)
try:
port=int(port)
except ValueError:
return False
if port>0 and port<65536:
return port
else:
return False
if __name__ == "__main__":
if __name__ == '__main__':
pwd=path.dirname(path.realpath(__file__))
config=open(pwd+'/spoofident.json','r')
settings=load(config)