File usbmuxd-CVE-2016-5104.patch of Package usbmuxd.2701

From 4397b3376dc4e4cb1c991d0aed61ce6482614196 Mon Sep 17 00:00:00 2001
From: Joshua Hill <posixninja@gmail.com>
Date: Tue, 29 Dec 2015 23:09:37 +0100
Subject: [PATCH] common: [security fix] Make sure sockets only listen locally

Backport by Mike Gorse <mgorse@suse.com>
---
diff -urp usbmuxd-1.0.8.orig/libusbmuxd/sock_stuff.c usbmuxd-1.0.8/libusbmuxd/sock_stuff.c
--- usbmuxd-1.0.8.orig/libusbmuxd/sock_stuff.c	2012-04-07 17:50:09.000000000 -0500
+++ usbmuxd-1.0.8/libusbmuxd/sock_stuff.c	2016-05-27 14:30:01.628969302 -0500
@@ -174,7 +174,7 @@ int create_socket(uint16_t port)
 
 	memset((void *) &saddr, 0, sizeof(saddr));
 	saddr.sin_family = AF_INET;
-	saddr.sin_addr.s_addr = htonl(INADDR_ANY);
+	saddr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
 	saddr.sin_port = htons(port);
 
 	if (0 > bind(sfd, (struct sockaddr *) &saddr, sizeof(saddr))) {
openSUSE Build Service is sponsored by