aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSamuel Thibault <samuel.thibault@ens-lyon.org>2021-09-05 01:50:18 +0200
committerSamuel Thibault <samuel.thibault@ens-lyon.org>2021-09-05 01:50:18 +0200
commit6ec031b297b3f9bebd692511492367b4f14e50b4 (patch)
tree6f92dd101176662419d10092cd54d27e803ffc6d
parent25cd792d975105680f807e32951c87899901a0b9 (diff)
downloadslirp-6ec031b297b3f9bebd692511492367b4f14e50b4.zip
slirp-6ec031b297b3f9bebd692511492367b4f14e50b4.tar.gz
slirp-6ec031b297b3f9bebd692511492367b4f14e50b4.tar.bz2
slirp_socketpair_with_oob: Connect pair through 127.0.0.1
We do not need the socket to be exposed outside the localhost, and this reduces the attack surface. Suggested-by: Akihiro Suda <suda.kyoto@gmail.com>
-rw-r--r--src/misc.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/misc.c b/src/misc.c
index 48f180b..ba5fb51 100644
--- a/src/misc.c
+++ b/src/misc.c
@@ -82,7 +82,7 @@ static int slirp_socketpair_with_oob(int sv[2])
struct sockaddr_in addr = {
.sin_family = AF_INET,
.sin_port = 0,
- .sin_addr.s_addr = INADDR_ANY,
+ .sin_addr.s_addr = htonl(INADDR_LOOPBACK),
};
socklen_t addrlen = sizeof(addr);
int ret, s;