Subject: tinyproxy: Incorrect handling of IP mask rules
Package: tinyproxy
Version: 1.6.3-4
Severity: important
Tags: patch

*** Please type your report below this line ***

The 1.6.3-3.2 version of tinyproxy does not properly handle IP mask
rules:
  1) They are ignored for upstream rules entirely
  2) The hostname is not translated to an IP address before matching.

Therefore, a rule like: 
  upstream test-proxy:8088 "127.0.0.0/8"

will never take effect.

Also, the documentation says the last rule applies, while in the code,
the first rule applies.  The attached patch fixes all of these issues.
The installed version (1.6.3-4) is the version with the patch applied.
        -Eric

-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages tinyproxy depends on:
ii  libc6                         2.7-18     GNU C Library: Shared libraries
ii  logrotate                     3.7.1-5    Log rotation utility

tinyproxy recommends no packages.

tinyproxy suggests no packages.

-- no debconf information

Attachment: bugfix.patch
Description: Binary data

Reply via email to