Fix bug #68: Allow all ports for CONNECT at absence of ConnectPort in config.
This commit is contained in:
parent
aea157d7c9
commit
9c500d06f2
@ -53,11 +53,11 @@ int check_allowed_connect_ports (int port, vector_t connect_ports)
|
|||||||
int *data;
|
int *data;
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* A port list is REQUIRED for a CONNECT request to function
|
* The absence of ConnectPort options in the config file
|
||||||
* properly. This closes a potential security hole.
|
* meanas that all ports are allowed for CONNECT.
|
||||||
*/
|
*/
|
||||||
if (!connect_ports)
|
if (!connect_ports)
|
||||||
return 0;
|
return 1;
|
||||||
|
|
||||||
for (i = 0; i != (size_t) vector_length (connect_ports); ++i) {
|
for (i = 0; i != (size_t) vector_length (connect_ports); ++i) {
|
||||||
data = (int *) vector_getentry (connect_ports, i, NULL);
|
data = (int *) vector_getentry (connect_ports, i, NULL);
|
||||||
|
Loading…
Reference in New Issue
Block a user