[pve-devel] [PATCH] spiceproxy : allow only spice port range

[Alexandre Derumier]

Signed-off-by: Alexandre Derumier <aderumier at odiso.com>
---
 PVE/HTTPServer.pm |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/PVE/HTTPServer.pm b/PVE/HTTPServer.pm
index 89eff30..f516735 100755
--- a/PVE/HTTPServer.pm
+++ b/PVE/HTTPServer.pm
@@ -500,6 +500,8 @@ sub handle_spice_proxy_request {
 
     eval {
 
+        die "Port $spiceport is not allowed" if ($spiceport < 61000 || $spiceport > 61099);
+
 	my $rpcenv = $self->{rpcenv};
 	$rpcenv->init_request();
 
-- 
1.7.10.4