5e4153d486
to fail needlessly if a reverse DNS lookup of the IP address didn't come up with a hostname. As a comment in the code clearly stated, the "damn hostname" was looked up only for the purpose of netgroup matching. But if that lookup failed, the function bailed out immediately even though in many cases netgroup matching would not be used. This change marks the hostname as unknown but continues. Where netgroup matching is performed, an unknown hostname is handled conservatively. I.e., for "+@netgroup" (accept) entries an unknown hostname never matches, and for "-@netgroup" (reject) entries an unknown hostname always matches. In the lines affected (only), I also fixed a few bogus casts. There are others, and in fact this entire file would be a good candidate for a cleanup sweep. Reviewed by: imp (wearing his flourescent yellow Security Team cap) MFC after: 2 days |
||
|---|---|---|
| .. | ||
| compat | ||
| csu | ||
| libalias | ||
| libatm | ||
| libbind | ||
| libbz2 | ||
| libc | ||
| libc_r | ||
| libcalendar | ||
| libcam | ||
| libcom_err | ||
| libcompat | ||
| libcrypt | ||
| libdevinfo | ||
| libdevstat | ||
| libdisk | ||
| libedit | ||
| libfetch | ||
| libform | ||
| libftpio | ||
| libio | ||
| libipsec | ||
| libipx | ||
| libisc | ||
| libkse | ||
| libkvm | ||
| libmd | ||
| libmenu | ||
| libmilter | ||
| libmp | ||
| libncp | ||
| libncurses | ||
| libnetgraph | ||
| libopie | ||
| libpam | ||
| libpanel | ||
| libpcap | ||
| libpthread | ||
| libradius | ||
| librpcsvc | ||
| libsbuf | ||
| libsm | ||
| libsmb | ||
| libsmdb | ||
| libsmutil | ||
| libstand | ||
| libtacplus | ||
| libtelnet | ||
| libufs | ||
| libugidfw | ||
| libusbhid | ||
| libutil | ||
| libvgl | ||
| libwrap | ||
| libxpg4 | ||
| liby | ||
| libypclnt | ||
| libz | ||
| msun | ||
| ncurses | ||
| Makefile | ||
| Makefile.inc | ||