Fix bug #68: Allow all ports for CONNECT at absence of ConnectPort in config.

This commit is contained in:
Michael Adam 2010-01-17 13:41:02 +01:00
parent aea157d7c9
commit 9c500d06f2

View File

@ -53,11 +53,11 @@ int check_allowed_connect_ports (int port, vector_t connect_ports)
int *data; int *data;
/* /*
* A port list is REQUIRED for a CONNECT request to function * The absence of ConnectPort options in the config file
* properly. This closes a potential security hole. * meanas that all ports are allowed for CONNECT.
*/ */
if (!connect_ports) if (!connect_ports)
return 0; return 1;
for (i = 0; i != (size_t) vector_length (connect_ports); ++i) { for (i = 0; i != (size_t) vector_length (connect_ports); ++i) {
data = (int *) vector_getentry (connect_ports, i, NULL); data = (int *) vector_getentry (connect_ports, i, NULL);