ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-14 21:28:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

We don't bind to non-local IP for TCP yet, but eliminate double check.

Browse Source
This commit is contained in:
Adam Ierymenko
2016-11-14 15:29:36 -08:00
parent e26bee45fb
commit ee5bd57d40
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
service/OneService.cpp
View File

@ -1259,12 +1259,10 @@ public:
inline void phyOnTcpAccept(PhySocket *sockL,PhySocket *sockN,void **uptrL,void **uptrN,const struct sockaddr *from) inline void phyOnTcpAccept(PhySocket *sockL,PhySocket *sockN,void **uptrL,void **uptrN,const struct sockaddr *from)
{ {
if ((!from)||(reinterpret_cast<const InetAddress *>(from)->ipScope() != InetAddress::IP_SCOPE_LOOPBACK)) { if (!from) {
// Non-Loopback: deny (for now)
_phy.close(sockN,false); _phy.close(sockN,false);
return; return;
} else { } else {
// Loopback == HTTP JSON API request
TcpConnection *tc = new TcpConnection(); TcpConnection *tc = new TcpConnection();
_tcpConnections.insert(tc); _tcpConnections.insert(tc);
tc->type = TcpConnection::TCP_HTTP_INCOMING; tc->type = TcpConnection::TCP_HTTP_INCOMING;