- security, barf in case of problems with hosts.allow/deny files --- tcp_wrappers_7.6/hosts_access.c.sig 2003-02-10 16:18:31.000000000 +0100 +++ tcp_wrappers_7.6/hosts_access.c 2003-02-10 16:50:38.000000000 +0100 @@ -66,6 +66,7 @@ #define YES 1 #define NO 0 +#define ERR -1 /* * These variables are globally visible so that they can be redirected in @@ -129,11 +129,11 @@ verdict = setjmp(tcpd_buf); if (verdict != 0) return (verdict == AC_PERMIT); - if (table_match(hosts_allow_table, request)) + if (table_match(hosts_allow_table, request) == YES) return (YES); - if (table_match(hosts_deny_table, request)) - return (NO); - return (YES); + if (table_match(hosts_deny_table, request) == NO) + return (YES); + return (NO); } /* table_match - match table entries with (daemon, client) pair */ @@ -175,8 +175,9 @@ (void) fclose(fp); } else if (errno != ENOENT) { tcpd_warn("cannot open %s: %m", table); + match = ERR; } - if (match) { + if (match == YES) { if (hosts_access_verbose > 1) syslog(LOG_DEBUG, "matched: %s line %d", tcpd_context.file, tcpd_context.line);