From e5d5a17fe16b5bb22259cb84ef13cd47e60d77d7 Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Wed, 9 Sep 2009 11:07:28 +1000
Subject:  - (djm) [serverloop.c] Fix test for server-assigned remote
 forwarding port    (-R 0:...); bz#1578, spotted and fix by gavin AT emf.net;
 ok dtucker@

---
 ChangeLog    | 4 ++++
 serverloop.c | 3 ++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index b692efad7..dcb471b53 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20090908
+ - (djm) [serverloop.c] Fix test for server-assigned remote forwarding port
+   (-R 0:...); bz#1578, spotted and fix by gavin AT emf.net; ok dtucker@
+
 20090901
  - (dtucker) [configure.ac] Bug #1639: use AC_PATH_PROG to search the path for
    krb5-config if it's not in the location specified by --with-kerberos5.
diff --git a/serverloop.c b/serverloop.c
index d8cb54bc7..8be01c5c3 100644
--- a/serverloop.c
+++ b/serverloop.c
@@ -1124,7 +1124,8 @@ server_input_global_request(int type, u_int32_t seq, void *ctxt)
 		    no_port_forwarding_flag ||
 		    (!want_reply && listen_port == 0)
 #ifndef NO_IPPORT_RESERVED_CONCEPT
-		    || (listen_port < IPPORT_RESERVED && pw->pw_uid != 0)
+		    || (listen_port != 0 && listen_port < IPPORT_RESERVED &&
+                    pw->pw_uid != 0)
 #endif
 		    ) {
 			success = 0;
-- 
cgit v1.2.3