patch for NMU to be uploaded shortly attached.
diff -ruN ../orig/ucd-snmp-4.2.5/debian/changelog 
ucd-snmp-4.2.5/debian/changelog
--- ../orig/ucd-snmp-4.2.5/debian/changelog     2006-02-20 05:06:46.000000000 
+0000
+++ ucd-snmp-4.2.5/debian/changelog     2006-02-20 05:18:39.000000000 +0000
@@ -1,3 +1,10 @@
+ucd-snmp (4.2.5-5.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix packet length check (closes: #337394)
+
+ -- Blars Blarson <[EMAIL PROTECTED]>  Mon, 20 Feb 2006 05:11:16 +0000
+
 ucd-snmp (4.2.5-5) unstable; urgency=medium
 
   * Build-Conflicts automake -> automake1.4 (fix build on arm)
diff -ruN ../orig/ucd-snmp-4.2.5/snmplib/snmp_api.c 
ucd-snmp-4.2.5/snmplib/snmp_api.c
--- ../orig/ucd-snmp-4.2.5/snmplib/snmp_api.c   2002-05-06 23:13:47.000000000 
+0000
+++ ucd-snmp-4.2.5/snmplib/snmp_api.c   2006-02-20 05:11:09.000000000 +0000
@@ -4120,7 +4120,7 @@
         else
           isp->proper_len = asn_check_packet(isp->packet, isp->packet_len);
 
-        if (isp->proper_len > MAX_PACKET_LENGTH) {
+        if (isp->proper_len > MAX_PACKET_LENGTH || isp->proper_len < 0) {
           /* illegal length, drop the connection */
           snmp_log(LOG_ERR,"Maximum packet size exceeded in a request.\n");
           isp->sd = -1;

Reply via email to