diff -u sudo-1.8.4p4 sudo-1.8.4p5

gistfile1.diff

For more context, see http://www.sudo.ws/sudo/alerts/netmask.html .

diff -u -r sudo-1.8.4p4/plugins/sudoers/match_addr.c sudo-1.8.4p5/plugins/sudoers/match_addr.c
--- sudo-1.8.4p4/plugins/sudoers/match_addr.c   2012-03-12 19:02:11.000000000 +0100
+++ sudo-1.8.4p5/plugins/sudoers/match_addr.c   2012-05-11 21:47:59.000000000 +0200
@@ -92,6 +92,7 @@
                }
                if (j == sizeof(addr.ip6.s6_addr))
                    debug_return_bool(true);
+               break;
 #endif /* HAVE_STRUCT_IN6_ADDR */
        }
     }
@@ -161,5 +162,6 @@
            case AF_INET:
                if ((ifp->addr.ip4.s_addr & mask.ip4.s_addr) == addr.ip4.s_addr)
                    debug_return_bool(true);
+               break;
 #ifdef HAVE_STRUCT_IN6_ADDR
            case AF_INET6:
                for (j = 0; j < sizeof(addr.ip6.s6_addr); j++) {
@@ -168,6 +170,7 @@
                }
                if (j == sizeof(addr.ip6.s6_addr))
                    debug_return_bool(true);
+               break;
 #endif /* HAVE_STRUCT_IN6_ADDR */
        }
     }