dark/zerotiertspu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Minor security: lock roots to only be reachable via World IPs.

Browse source
This commit is contained in:
Adam Ierymenko 2016-12-05 16:09:42 -08:00
parent 4b3a47849d
commit 244f37179c
3 changed files with 36 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

17
node/Topology.cpp
View file

@ -264,6 +264,23 @@ void Topology::setUpstream(const Address &a,bool upstream)
RR->sw->requestWhois(a);
}
bool Topology::isProhibitedEndpoint(const Address &ztaddr,const InetAddress &ipaddr) const
{
Mutex::Lock _l(_lock);
if (std::find(_rootAddresses.begin(),_rootAddresses.end(),ztaddr) != _rootAddresses.end()) {
for(std::vector<World::Root>::const_iterator r(_world.roots().begin());r!=_world.roots().end();++r) {
for(std::vector<InetAddress>::const_iterator e(r->stableEndpoints.begin());e!=r->stableEndpoints.end();++e) {
if (ipaddr.ipsEqual(*e))
return false;
}
}
return true;
}
return false;
}
bool Topology::worldUpdateIfValid(const World &newWorld)
{
Mutex::Lock _l(_lock);