Comment 4 for bug 1192229

Revision history for this message
Thierry Carrez (ttx) wrote : Re: verify_callback's second if will never be run

@Thomas:
* is usage of direct IP address the only way to stumble on this vulnerability ? Or do you see other cases where this needed verification is bypassed ?
* did you already check other OpenStack python-PROJECTclient codebases for the existence of a similar issue ?