don't accept connections from ports below 512
[unix-history] / usr / src / libexec / rlogind / rlogind.c
index a190e89..eec0cb3 100644 (file)
@@ -104,7 +104,8 @@ doit(f, fromp)
                hp->h_name = inet_ntoa(fromp->sin_addr);
        }
        if (fromp->sin_family != AF_INET ||
                hp->h_name = inet_ntoa(fromp->sin_addr);
        }
        if (fromp->sin_family != AF_INET ||
-           fromp->sin_port >= IPPORT_RESERVED)
+           fromp->sin_port >= IPPORT_RESERVED ||
+           fromp->sin_port < IPPORT_RESERVED/2)
                fatal(f, "Permission denied");
        write(f, "", 1);
        for (c = 'p'; c <= 's'; c++) {
                fatal(f, "Permission denied");
        write(f, "", 1);
        for (c = 'p'; c <= 's'; c++) {