From: Fabian Keil <fk@fabiankeil.de>
Date: Mon, 26 Jun 2017 12:10:31 +0000 (+0000)
Subject: Explicitly taint the server socket in case of CONNECT requests
X-Git-Tag: v_3_0_27~115
X-Git-Url: http://www.privoxy.org/gitweb/%22https:/faq/@default-cgi@/static/@default-cgi@show-url-info?a=commitdiff_plain;h=cbf9528e3e921483f30f9887924de47898c4fcfd;p=privoxy.git

Explicitly taint the server socket in case of CONNECT requests

This doesn't fix any known problems, but makes
some log messages less confusing.
---

diff --git a/jcc.c b/jcc.c
index fbeb6c0c..6e952c77 100644
--- a/jcc.c
+++ b/jcc.c
@@ -1,4 +1,4 @@
-const char jcc_rcs[] = "$Id: jcc.c,v 1.460 2017/06/08 13:05:09 fabiankeil Exp $";
+const char jcc_rcs[] = "$Id: jcc.c,v 1.461 2017/06/26 12:09:56 fabiankeil Exp $";
 /*********************************************************************
  *
  * File        :  $Source: /cvsroot/ijbswa/current/jcc.c,v $
@@ -1852,6 +1852,10 @@ static jb_err parse_client_request(struct client_state *csp)
       }
       verify_request_length(csp);
    }
+   else
+   {
+      csp->flags |= CSP_FLAG_SERVER_SOCKET_TAINTED;
+   }
 #endif /* def FEATURE_CONNECTION_KEEP_ALIVE */
 
    err = sed(csp, FILTER_CLIENT_HEADERS);