File sudo-1.8.2-CVE-2012-2337.patch of Package sudo.511
Index: match.c
===================================================================
--- match.c.orig 2011-03-16 20:55:55.000000000 +0100
+++ match.c 2012-05-16 11:57:23.394610030 +0200
@@ -645,7 +645,7 @@ addr_matches_if(n)
ifp = &interfaces[i];
if (ifp->family != family)
continue;
- switch(family) {
+ switch (family) {
case AF_INET:
if (ifp->addr.ip4.s_addr == addr.ip4.s_addr ||
(ifp->addr.ip4.s_addr & ifp->netmask.ip4.s_addr)
@@ -663,6 +663,7 @@ addr_matches_if(n)
}
if (j == sizeof(addr.ip6.s6_addr))
return TRUE;
+ break;
#endif
}
}
@@ -728,6 +729,7 @@ addr_matches_if_netmask(n, m)
case AF_INET:
if ((ifp->addr.ip4.s_addr & mask.ip4.s_addr) == addr.ip4.s_addr)
return TRUE;
+ break;
#ifdef HAVE_IN6_ADDR
case AF_INET6:
for (j = 0; j < sizeof(addr.ip6.s6_addr); j++) {
@@ -736,6 +738,7 @@ addr_matches_if_netmask(n, m)
}
if (j == sizeof(addr.ip6.s6_addr))
return TRUE;
+ break;
#endif /* HAVE_IN6_ADDR */
}
}