Bug #1112: PURGE allowed to delete internal objects

diff --git a/src/client_side_reply.cc b/src/client_side_reply.cc
index bbb30517d3f497963bf04ba41ef8e8f3f00b8615..2702478da8491474a57f160d931ab857c502245b 100644 (file)
--- a/src/client_side_reply.cc
+++ b/src/client_side_reply.cc
@@ -1,6 +1,6 @@
 
 /*
- * $Id: client_side_reply.cc,v 1.75 2004/12/08 00:24:42 hno Exp $
+ * $Id: client_side_reply.cc,v 1.76 2004/12/10 00:51:33 hno Exp $
  *
  * DEBUG: section 88    Client-side Reply Routines
  * AUTHOR: Robert Collins (Originally Duane Wessels in client_side.c)
@@ -902,6 +902,16 @@ void
 clientReplyContext::purgeFoundObject(StoreEntry *entry)
 {
     assert (entry && !entry->isNull());
+
+    if (EBIT_TEST(entry->flags, ENTRY_SPECIAL)) {
+        http->logType = LOG_TCP_DENIED;
+        ErrorState *err =
+            clientBuildError(ERR_ACCESS_DENIED, HTTP_FORBIDDEN, NULL,
+                             &http->getConn()->peer.sin_addr, http->request);
+        startError(err);
+        return;
+    }
+
     StoreIOBuffer tempBuffer;
     /* Swap in the metadata */
     http->storeEntry(entry);