Handler methods that use ip parameter should be protected against empty string

turbobytes / geoipdb

GeoIP related related helper functions for TurboBytes stack

MIT License

0 stars 2 forks source link

Handler methods that use ip parameter should be protected against empty string #22

Closed coolparadox closed 7 years ago

coolparadox commented 7 years ago

There are several functions in geoipdb library that accept an ip string parameter. If called with empty string, they try to do their job without questioning.

This can lead to misbehaviour (eg. LibGeoipLookup() returning ASN of the local public address of the host), or data corruption (eg. a cache entry for an empty IP).