Module Name:    src
Committed By:   christos
Date:           Wed May  3 21:28:00 UTC 2017

Modified Files:
        src/usr.sbin/rpcbind: rpcb_svc_com.c

Log Message:
Limit size of buffer:
https://github.com/guidovranken/rpcbomb/blob/master/rpcbind_patch.txt
XXX: pullup-7


To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 src/usr.sbin/rpcbind/rpcb_svc_com.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/usr.sbin/rpcbind/rpcb_svc_com.c
diff -u src/usr.sbin/rpcbind/rpcb_svc_com.c:1.18 src/usr.sbin/rpcbind/rpcb_svc_com.c:1.19
--- src/usr.sbin/rpcbind/rpcb_svc_com.c:1.18	Tue Nov 10 13:04:51 2015
+++ src/usr.sbin/rpcbind/rpcb_svc_com.c	Wed May  3 17:28:00 2017
@@ -1,4 +1,4 @@
-/*	$NetBSD: rpcb_svc_com.c,v 1.18 2015/11/10 18:04:51 christos Exp $	*/
+/*	$NetBSD: rpcb_svc_com.c,v 1.19 2017/05/03 21:28:00 christos Exp $	*/
 
 /*
  * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
@@ -45,6 +45,7 @@
 #include <sys/socket.h>
 #include <rpc/rpc.h>
 #include <rpc/rpcb_prot.h>
+#include <rpc/rpc_com.h>
 #include <netconfig.h>
 #include <errno.h>
 #include <syslog.h>
@@ -421,7 +422,8 @@ rpcbproc_taddr2uaddr_com(void *arg, stru
 static bool_t
 xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
 {
-	return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
+	return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen),
+	    RPC_MAXDATASIZE));
 }
 
 /*

Reply via email to