Changeset 626b446

Timestamp:

2005-12-02T11:30:03Z (19 years ago)

Author:

Wilmer van der Gaast <wilmer@…>

Branches:

master

Children:

027d2eb

Parents:

e5663e0

Message:

The Jabber module now only accepts a limited range of ports (5222 and 5223),
so it can't be abused as a portscanner. Thanks to Peter van Dijk (Habbie)
for the report.

File:

• protocols/jabber/jabber.c (modified) (1 diff)

protocols/jabber/jabber.c

@@ -590 +590 @@
         else if (port == -1 && ssl)
                 port = DEFAULT_PORT_SSL;
+        else if (port != 5222 && port != 5223) {
+                serv_got_crap(GJ_GC(gjc), "Only port numbers 5222 and 5223 are allowed for Jabber connections.");
+                STATE_EVT(JCONN_STATE_OFF)
+                return;
+        }
         
         if (server == NULL)