diff options
| author |   deraadt <deraadt@openbsd.org> | 1997-04-25 09:30:14 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 1997-04-25 09:30:14 +0000 |
| commit | 82402fffca1b0b1a3fd7e7d2119e63c8cecd64c2 (patch) | |
| tree | f20e0b2aa8750d43fd7fd77163e46c2c25823e61 /sys/nfs/nfs_subs.c | |
| parent | XXX should do reserved ports (diff) | |
| download | wireguard-openbsd-82402fffca1b0b1a3fd7e7d2119e63c8cecd64c2.tar.xz wireguard-openbsd-82402fffca1b0b1a3fd7e7d2119e63c8cecd64c2.zip | |
require reserved ports. avoid ftp bounce.
Diffstat (limited to 'sys/nfs/nfs_subs.c')
| -rw-r--r-- | sys/nfs/nfs_subs.c | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/sys/nfs/nfs_subs.c b/sys/nfs/nfs_subs.c index 252da8bdbf1..3edd8a9d3a4 100644 --- a/sys/nfs/nfs_subs.c +++ b/sys/nfs/nfs_subs.c @@ -1,4 +1,4 @@ -/* $OpenBSD: nfs_subs.c,v 1.15 1996/12/18 18:30:58 niklas Exp $ */ +/* $OpenBSD: nfs_subs.c,v 1.16 1997/04/25 09:30:14 deraadt Exp $ */ /* $NetBSD: nfs_subs.c,v 1.27.4.3 1996/07/08 20:34:24 jtc Exp $ */ /* @@ -54,6 +54,7 @@ #include <sys/namei.h> #include <sys/mbuf.h> #include <sys/socket.h> +#include <sys/socketvar.h> #include <sys/stat.h> #include <sys/malloc.h> #include <sys/time.h> @@ -1703,6 +1704,7 @@ nfsrv_fhtovp(fhp, lockflag, vpp, cred, slp, nam, rdonlyp, kerbflag) register int i; struct ucred *credanon; int error, exflags; + struct sockaddr_in *saddr; *vpp = (struct vnode *)0; #ifdef Lite2_integrated @@ -1715,6 +1717,15 @@ nfsrv_fhtovp(fhp, lockflag, vpp, cred, slp, nam, rdonlyp, kerbflag) error = VFS_FHTOVP(mp, &fhp->fh_fid, nam, vpp, &exflags, &credanon); if (error) return (error); + + saddr = mtod(nam, struct sockaddr_in *); + if (saddr->sin_family == AF_INET && + (ntohs(saddr->sin_port) >= IPPORT_RESERVED || + (slp->ns_so->so_type == SOCK_STREAM && ntohs(saddr->sin_port) == 20))) { + vput(*vpp); + return (NFSERR_AUTHERR | AUTH_TOOWEAK); + } + /* * Check/setup credentials. */ |