diff options
author | Michael Adam <obnox@samba.org> | 2010-01-17 13:41:02 +0100 |
---|---|---|
committer | Michael Adam <obnox@samba.org> | 2010-01-17 13:41:02 +0100 |
commit | 9c500d06f20c5f0cc3deff18702c2be2a2e1405d (patch) | |
tree | 8e2eb9657fb93915e757aa209630a886a231dcb0 /src | |
parent | aea157d7c934850c384998e6688ac5f241110c65 (diff) | |
download | tinyproxy-9c500d06f20c5f0cc3deff18702c2be2a2e1405d.tar.gz tinyproxy-9c500d06f20c5f0cc3deff18702c2be2a2e1405d.zip |
Fix bug #68: Allow all ports for CONNECT at absence of ConnectPort in config.
Diffstat (limited to '')
-rw-r--r-- | src/connect-ports.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/connect-ports.c b/src/connect-ports.c index 1aaacf8..011e98c 100644 --- a/src/connect-ports.c +++ b/src/connect-ports.c @@ -53,11 +53,11 @@ int check_allowed_connect_ports (int port, vector_t connect_ports) int *data; /* - * A port list is REQUIRED for a CONNECT request to function - * properly. This closes a potential security hole. + * The absence of ConnectPort options in the config file + * meanas that all ports are allowed for CONNECT. */ if (!connect_ports) - return 0; + return 1; for (i = 0; i != (size_t) vector_length (connect_ports); ++i) { data = (int *) vector_getentry (connect_ports, i, NULL); |