This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goserver. commit bc08472f6a43df25ad5d39798681a0653d1f0b24 Author: Mihai Moldovan <ionic@ionic.de> Date: Mon Jan 8 06:13:20 2018 +0100 x2goserver/lib/x2gogetfreeport: check start and end paramters in a stricter fashion. Cherry-picked from release/4.0.1.x branch. --- debian/changelog | 2 ++ x2goserver/lib/x2gogetfreeport | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index 7efec84..2fab631 100644 --- a/debian/changelog +++ b/debian/changelog @@ -329,6 +329,8 @@ x2goserver (4.0.1.23-0x2go1) UNRELEASED; urgency=medium shift parameter sanitization failure codes up. - x2goserver/lib: new script x2gocheckport, containing common functionality for port checking. Duplicated code will be deleted next. + - x2goserver/lib/x2gogetfreeport: check start and end paramters in a + stricter fashion. * x2goserver.spec: - RPMify x2goserver-xsession description. - Remove qt4 stuff, we're not using the framework here. diff --git a/x2goserver/lib/x2gogetfreeport b/x2goserver/lib/x2gogetfreeport index 705ac61..1a80c73 100755 --- a/x2goserver/lib/x2gogetfreeport +++ b/x2goserver/lib/x2gogetfreeport @@ -40,10 +40,10 @@ if [[ -z "${ss}" ]] || [[ "${ss}" =~ ${empty_regex} ]]; then fi typeset -i start_i="${start}" typeset -i end_i="${end}" -if [[ -z "${start}" ]] || [[ "${start}" != "${start_i}" ]] || [[ "${start}" -ne "${start_i}" ]]; then +if [[ -z "${start}" ]] || [[ "${start}" != "${start_i}" ]] || [[ "${start}" -ne "${start_i}" ]] || [[ "${start_i}" -lt '0' ]] || [[ "${start_i}" -gt '65535' ]]; then exit '3' fi -if [[ -z "${end}" ]] || [[ "${end}" != "${end_i}" ]] || [[ "${end}" -ne "${end_i}" ]]; then +if [[ -z "${end}" ]] || [[ "${end}" != "${end_i}" ]] || [[ "${end}" -ne "${end_i}" ]] || [[ "${end_i}" -lt "${start_i}" ]] || [[ "${end_i}" -gt '65535' ]]; then exit '4' fi [[ "${type}" != 'lowlevel' ]] && [[ "${type}" != 'display' ]] && exit '5' -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/x2goserver.git