Actions
Bug #11311
closed
Listen and peer port validation in wg.inc
Start date:
01/25/2021
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.5.0
Affected Architecture:
Description
The listen port in function wg_validate_post and the peer port in function wg_validate_peer do not appear to be validated correctly. Just about any text can be entered and accepted. This could be an issue with form field validation elsewhere, but something along the lines of the following code might help....
if (empty($lport) || !ctype_digit ($lport) || !in_array ((int) $lport, range (0, 65535)))
Updated by Jim Pingle about 3 years ago
- Assignee set to Jim Pingle
- Target version set to 2.5.0
- Affected Version set to 2.5.0
Updated by Jim Pingle about 3 years ago
- Status changed from New to Feedback
- % Done changed from 0 to 100
Applied in changeset 0a0ef3352ad9a9c3710c1349a9e91da3209050df.
Updated by Max Leighton about 3 years ago
- Status changed from Feedback to Resolved
Tested on the latest 2.5 image. It's working as expected. I'll mark it as resolved.
Actions