1Upstream-Status: Backport
2
3* Mon Feb 10 2003 Harald Hoyer <harald@redhat.de> 7.6-29
4- added security patch tcp_wrappers-7.6-sig.patch
5
6--- tcp_wrappers_7.6/hosts_access.c.sig	2003-02-10 16:18:31.000000000 +0100
7+++ tcp_wrappers_7.6/hosts_access.c	2003-02-10 16:50:38.000000000 +0100
8@@ -66,6 +66,7 @@
9
10 #define	YES		1
11 #define	NO		0
12+#define ERR             -1
13
14  /*
15   * These variables are globally visible so that they can be redirected in
16@@ -129,9 +129,9 @@
17 	return (verdict == AC_PERMIT);
18     if (table_match(hosts_allow_table, request))
19 	return (YES);
20-    if (table_match(hosts_deny_table, request))
21-	return (NO);
22-    return (YES);
23+    if (table_match(hosts_deny_table, request) == NO)
24+	return (YES);
25+    return (NO);
26 }
27
28 /* table_match - match table entries with (daemon, client) pair */
29@@ -175,6 +175,7 @@
30 	(void) fclose(fp);
31     } else if (errno != ENOENT) {
32 	tcpd_warn("cannot open %s: %m", table);
33+	match = ERR;
34     }
35     if (match) {
36 	if (hosts_access_verbose > 1)
37