From: Jo-Philipp Wich <jow@openwrt.org>
Date: Thu, 12 Sep 2013 08:35:55 +0000 (+0200)
Subject: session: disallow destroying the null session
X-Git-Url: http://git.openwrt.org/?p=project%2Frpcd.git;a=commitdiff_plain;h=00a3ec2e523ffbdb4f027642da18cc0bf8ce9285

session: disallow destroying the null session
---

diff --git a/session.c b/session.c
index 5d403f0..fc5f19b 100644
--- a/session.c
+++ b/session.c
@@ -751,6 +751,9 @@ rpc_handle_destroy(struct ubus_context *ctx, struct ubus_object *obj,
 	if (!tb)
 		return UBUS_STATUS_INVALID_ARGUMENT;
 
+	if (!strcmp(blobmsg_get_string(tb), RPC_DEFAULT_SESSION_ID))
+		return UBUS_STATUS_PERMISSION_DENIED;
+
 	ses = rpc_session_get(blobmsg_data(tb));
 	if (!ses)
 		return UBUS_STATUS_NOT_FOUND;