- same as mod_rpaf_detine.patch, but with ipv6 enabled in apache1

[packages/apache1-mod_rpaf.git] / apache1-mod_rpaf_degtine.patch

diff --git a/apache1-mod_rpaf_degtine.patch b/apache1-mod_rpaf_degtine.patch
new file mode 100644 (file)
index 0000000..8c67e5e
--- /dev/null
+++ b/apache1-mod_rpaf_degtine.patch
@@ -0,0 +1,56 @@
+--- mod_rpaf-0.5.orig/mod_rpaf-2.0.c   2004-03-17 17:47:30.000000000 +0200
++++ mod_rpaf-0.5/mod_rpaf-2.0.c        2007-09-27 13:23:45.335194758 +0300
+@@ -130,6 +130,16 @@
+     return 0;
+ }
+ 
++static char* last_not_in_array(apr_array_header_t *forwarded_for,
++                             apr_array_header_t *proxy_ips) {
++    int i;
++    for (i = (forwarded_for->nelts)-1; i > 0; i--) {
++      if (!is_in_array(((char **)forwarded_for->elts)[i], proxy_ips))
++          break;
++    }
++    return ((char **)forwarded_for->elts)[i];
++}
++
+ static int change_remote_ip(request_rec *r) {
+     const char *fwdvalue;
+     char *val;
+@@ -147,7 +157,7 @@
+                 if (*fwdvalue != '\0')
+                     ++fwdvalue;
+             }
+-            r->connection->remote_ip = apr_pstrdup(r->connection->pool, ((char **)arr->elts)[((arr->nelts)-1)]);
++            r->connection->remote_ip = apr_pstrdup(r->connection->pool, last_not_in_array(arr, cfg->proxy_ips));
+             r->connection->remote_addr->sa.sin.sin_addr.s_addr = inet_addr(r->connection->remote_ip);
+             if (cfg->sethostname) {
+                 const char *hostvalue;
+--- mod_rpaf-0.5.orig/mod_rpaf.c       2007-09-27 13:23:30.864865219 +0300
++++ mod_rpaf-0.5/mod_rpaf.c    2007-09-27 13:23:59.885526119 +0300
+@@ -130,6 +130,16 @@
+     return 0;
+ }
+ 
++static char* last_not_in_array(array_header *forwarded_for,
++                             array_header *proxy_ips) {
++    int i;
++    for (i = (forwarded_for->nelts)-1; i > 0; i--) {
++      if (!is_in_array(((char **)forwarded_for->elts)[i], proxy_ips))
++          break;
++    }
++    return ((char **)forwarded_for->elts)[i];
++}
++
+ static int change_remote_ip(request_rec *r) {
+     const char *fwdvalue;
+     char *val;
+@@ -147,7 +157,7 @@
+                 if (*fwdvalue != '\0')
+                     ++fwdvalue;
+             }
+-            r->connection->remote_ip = ap_pstrdup(r->connection->pool, ((char **)arr->elts)[((arr->nelts)-1)]);
++            r->connection->remote_ip = ap_pstrdup(r->connection->pool, last_not_in_array(arr, cfg->proxy_ips));
+                       switch (r->connection->remote_addr.ss_family) {
+                       case AF_INET:
+                               inet_pton(AF_INET, r->connection->remote_ip, &((struct sockaddr_in*)&r->connection->remote_addr)->sin_addr.s_addr);