[Help-smalltalk] [bug] SpSocket listens on 0.0.0.0 instead of 127.0.0.1

[Stefan Schmiedl]

Issue status update for 
http://smalltalk.gnu.org/node/342
Post a follow up: 
http://smalltalk.gnu.org/project/comments/add/342

Project:      GNU Smalltalk
Version:      <none>
Component:    Bindings: Sockets
Category:     bug reports
Priority:     critical
Assigned to:  Unassigned
Reported by:  swsch
Updated by:   swsch
Status:       active

The misbehavior shown below has potentially severe security
implications:

$ gst -i
"Global garbage collection... done"
GNU Smalltalk ready

st> PackageLoader fileInPackage: 'Sport'
Loading package Sockets
Loading package Sport
PackageLoader
st> s := SpSocket newTCPSocket
a SpSocket
st> s examine
An instance of SpSocket
  underlyingSocket: nil
  class: Sockets.StreamSocket
  socketAddress: nil
a SpSocket
st> a := SpIPAddress hostName: '127.0.0.1' port: 4080
a SpIPAddress
st> a examine
An instance of SpIPAddress
  hostAddress: ByteArray (127 0 0 1 )
  portNumber: 4080
a SpIPAddress
st> s bindSocketAddress: a
a SpSocket
st> s examine
An instance of SpSocket
  underlyingSocket: nil
  class: Sockets.StreamSocket
  socketAddress: a SpIPAddress
a SpSocket
st> s listenBackloggingUpTo: 1
a SpSocket
st> s examine
An instance of SpSocket
  underlyingSocket: Sockets.ServerSocket[0.0.0.0:4080]
  class: Sockets.StreamSocket
  socketAddress: a SpIPAddress
a SpSocket

$ uname -a
Linux g128 2.6.27-gentoo-r7-0709 #2 SMP Thu Jul 9 07:42:50 CEST 2009
x86_64 Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz GenuineIntel
GNU/Linux

smalltalk from git head: commit
d9418db1e3827cdf4f63b220421f775d13f29e0e