Fix bug #68463 listen.allowed_clients can silently result in no allowed access

Add a "There are no allowed addresses for this pool"

1 files changed, 4 insertions, 0 deletions

diff --git a/sapi/fpm/fpm/fastcgi.c b/sapi/fpm/fpm/fastcgi.c
index 36e37b79d3..d2764a59b7 100644
--- a/sapi/fpm/fpm/fastcgi.c
+++ b/sapi/fpm/fpm/fastcgi.c
@@ -280,6 +280,10 @@ void fcgi_set_allowed_clients(char *ip)
 		}
 		allowed_clients[n].sa.sa_family = 0;
 		free(ip);
+		if (!n) {
+			zlog(ZLOG_ERROR, "There are no allowed addresses for this pool");
+			/* don't clear allowed_clients as it will create an "open for all" security issue */
+		}
 	}
 }