mirror of
https://github.com/debauchee/barrier.git
synced 2026-05-05 21:02:39 +08:00
lib/server: Close connection when client app-level handshake fails
This fixes the following security vulnerability: - CVE-2021-42075 DoS via file descriptor exhaustion The issue has been reported by Matthias Gerstner <mgerstner@suse.de>.
This commit is contained in:
@@ -194,6 +194,11 @@ ClientListener::handleUnknownClient(const Event&, void* vclient)
|
||||
new TMethodEventJob<ClientListener>(this,
|
||||
&ClientListener::handleClientDisconnected,
|
||||
client));
|
||||
} else {
|
||||
auto* stream = unknownClient->getStream();
|
||||
if (stream) {
|
||||
stream->close();
|
||||
}
|
||||
}
|
||||
|
||||
// now finished with unknown client
|
||||
|
||||
Reference in New Issue
Block a user