Stop listening on DBusServer sockets when reaching max_incomplete_connections
authorAlban Crequy <alban.crequy@collabora.co.uk>
Fri, 4 Jul 2014 14:05:51 +0000 (15:05 +0100)
committerSimon McVittie <simon.mcvittie@collabora.co.uk>
Mon, 15 Sep 2014 11:28:37 +0000 (12:28 +0100)
commit8ad179a8dad789fc6a5402780044bc0ec3d41115
treea0aa286cd837e1064acd0da5390824bec0f176f6
parent54d26df52b6a394bea175651d1d7ad2ab3f87dea
Stop listening on DBusServer sockets when reaching max_incomplete_connections

This addresses the parts of CVE-2014-3639 not already addressed by
reducing the default authentication timeout.

Bug: https://bugs.freedesktop.org/show_bug.cgi?id=80851
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=80919
Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
bus/bus.c
bus/bus.h
bus/connection.c
bus/connection.h
dbus/dbus-server-protected.h
dbus/dbus-server.c
dbus/dbus-watch.c
dbus/dbus-watch.h