From e29166e4e8e806884f81712da97332716c5b65be Mon Sep 17 00:00:00 2001 From: Zdenek Styblik Date: Wed, 25 Jan 2012 11:53:41 +0000 Subject: [PATCH] Add input validation for time-out parameter in 'src/ipmievd.c'. --- ipmitool/src/ipmievd.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/ipmitool/src/ipmievd.c b/ipmitool/src/ipmievd.c index dd5ea26..722d9e9 100644 --- a/ipmitool/src/ipmievd.c +++ b/ipmitool/src/ipmievd.c @@ -715,7 +715,11 @@ ipmievd_main(struct ipmi_event_intf * eintf, int argc, char ** argv) daemon = 0; } else if (strncasecmp(argv[i], "timeout=", 8) == 0) { - selwatch_timeout = strtoul(argv[i]+8, NULL, 0); + if ( (str2int(argv[i]+8, &selwatch_timeout) != 0) || + selwatch_timeout < 0) { + lprintf(LOG_ERR, "Invalid input given or out of range for time-out."); + return (-1); + } } else if (strncasecmp(argv[i], "pidfile=", 8) == 0) { memset(pidfile, 0, 64);