[pve-devel] [PATCH] spiceproxy : allow only spice port range

Alexandre Derumier aderumier at odiso.com
Mon Jul 22 13:03:04 CEST 2013


Signed-off-by: Alexandre Derumier <aderumier at odiso.com>
---
 PVE/HTTPServer.pm |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/PVE/HTTPServer.pm b/PVE/HTTPServer.pm
index 89eff30..f516735 100755
--- a/PVE/HTTPServer.pm
+++ b/PVE/HTTPServer.pm
@@ -500,6 +500,8 @@ sub handle_spice_proxy_request {
 
     eval {
 
+        die "Port $spiceport is not allowed" if ($spiceport < 61000 || $spiceport > 61099);
+
 	my $rpcenv = $self->{rpcenv};
 	$rpcenv->init_request();
 
-- 
1.7.10.4



More information about the pve-devel mailing list