From f60bd577b72a5942b4f324f92f35781eab267db4 Mon Sep 17 00:00:00 2001
From: Alexandre Derumier <aderumier@odiso.com>
Date: Mon, 22 Jul 2013 13:03:04 +0200
Subject: [PATCH] spiceproxy : allow only spice port range

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
---
 PVE/HTTPServer.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/PVE/HTTPServer.pm b/PVE/HTTPServer.pm
index 89eff30f..f5167355 100755
--- a/PVE/HTTPServer.pm
+++ b/PVE/HTTPServer.pm
@@ -500,6 +500,8 @@ sub handle_spice_proxy_request {
 
     eval {
 
+        die "Port $spiceport is not allowed" if ($spiceport < 61000 || $spiceport > 61099);
+
 	my $rpcenv = $self->{rpcenv};
 	$rpcenv->init_request();