• Derek Cheng's avatar
    [Cast channel] Validate IP address from mDNS / cast channel requests. · 56d85f95
    Derek Cheng authored
    A valid Cast device address must be private. This is checked using
    the IPAddress::IsReserved() method, similar to DIAL's device description
    service.
    
    The check is performed in several entry points (some are redundant as
    extra safety net):
    - DnsSdRegistry, when it receives an device advertisement from mDNS
    - CastSocketService, before it opens socket
    - CastSocketServiceImpl::OpenChannel
    - CastChannelOpenFunction (entry point for chrome.cast.channel.open)
    
    Bug: 786109
    Change-Id: Iaad91834cd4149fd345b2ada4e2704a0e158ba49
    Reviewed-on: https://chromium-review.googlesource.com/792650
    Commit-Queue: Derek Cheng <imcheng@chromium.org>
    Reviewed-by: default avatarmark a. foltz <mfoltz@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#519857}
    56d85f95
cast_socket_service.cc 3.76 KB