Hi,
here's a little patch to update the CLISP functionality. PROBLEMS says: "The listen socket is bound on the loopback interface in all Lisps that support this." Alas, the CLISP code was not updated when that capability was added.
My patch is against slime-2.0. It's both included and appended in cases MS-Outlook munges it.
Regards, Jorg Hohle.
2006-12-07 Joerg Hoehle hoehle@users.sourceforge.net
* swank-clisp (create-socket): restrict to given (loopback) host interface for better security, when clisp >= 2.39
cd ~/.slime/slime-2.0/ diff -c /home/hoehle/.slime/slime-2.0/swank-clisp.lisp~ /home/hoehle/.slime/slime-2.0/swank-clisp.lisp *** /home/hoehle/.slime/slime-2.0/swank-clisp.lisp~ 2006-03-22 17:40:01.000000000 +0100 --- /home/hoehle/.slime/slime-2.0/swank-clisp.lisp 2006-12-07 15:13:35.000000000 +0100 *************** *** 108,115 **** ;;; TCP Server
(defimplementation create-socket (host port) ! (declare (ignore host)) ! (socket:socket-server port))
(defimplementation local-port (socket) (socket:socket-server-port socket)) --- 108,117 ---- ;;; TCP Server
(defimplementation create-socket (host port) ! (if ;;(member :interface (ext:arglist #'socket:socket-server)) ! (string>= (lisp-implementation-version) "2.39") ; bogus in 2.37-38 ! (socket:socket-server port :interface host) ; available since 2005-12-19 ! (socket:socket-server port)))
(defimplementation local-port (socket) (socket:socket-server-port socket))
Diff finished at Fri Apr 20 13:57:42