You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
31 lines
1022 B
31 lines
1022 B
From df1f5c4d70d0c19ad40072f5246ca457e7f9849e Mon Sep 17 00:00:00 2001 |
|
From: Joshua Hill <posixninja@gmail.com> |
|
Date: Tue, 29 Dec 2015 22:27:17 +0100 |
|
Subject: [PATCH] common: [security fix] Make sure sockets only listen locally |
|
|
|
--- |
|
common/socket.c | 4 ++-- |
|
1 file changed, 2 insertions(+), 2 deletions(-) |
|
|
|
diff --git a/common/socket.c b/common/socket.c |
|
index b276864..e2968a6 100644 |
|
--- a/common/socket.c |
|
+++ b/common/socket.c |
|
@@ -172,7 +172,7 @@ int socket_create(uint16_t port) |
|
|
|
memset((void *) &saddr, 0, sizeof(saddr)); |
|
saddr.sin_family = AF_INET; |
|
- saddr.sin_addr.s_addr = htonl(INADDR_ANY); |
|
+ saddr.sin_addr.s_addr = htonl(INADDR_LOOPBACK); |
|
saddr.sin_port = htons(port); |
|
|
|
if (0 > bind(sfd, (struct sockaddr *) &saddr, sizeof(saddr))) { |
|
@@ -329,7 +329,7 @@ int socket_accept(int fd, uint16_t port) |
|
|
|
memset(&addr, 0, sizeof(addr)); |
|
addr.sin_family = AF_INET; |
|
- addr.sin_addr.s_addr = htonl(INADDR_ANY); |
|
+ addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK); |
|
addr.sin_port = htons(port); |
|
|
|
addr_len = sizeof(addr);
|
|
|