From 366ad1e7c425d0ab86cbcc3dd3a594d03142cd9f Mon Sep 17 00:00:00 2001 From: Tolriq Date: Tue, 1 Mar 2016 17:01:30 +0100 Subject: EventServer security fix. EventServer is supposed to only listen on loopback when the setting Allow remote control by programs on other system is off ! --- xbmc/network/EventServer.cpp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/xbmc/network/EventServer.cpp b/xbmc/network/EventServer.cpp index b91549cfd7..472b421ed3 100644 --- a/xbmc/network/EventServer.cpp +++ b/xbmc/network/EventServer.cpp @@ -157,6 +157,9 @@ void CEventServer::Run() CSocketListener listener; int packetSize = 0; + if (!CSettings::GetInstance().GetBool(CSettings::SETTING_SERVICES_ESALLINTERFACES)) + any_addr.SetAddress("127.0.0.1"); // only listen on localhost + CLog::Log(LOGNOTICE, "ES: Starting UDP Event server on %s:%d", any_addr.Address(), m_iPort); Cleanup(); -- cgit v1.2.3