diff options
Diffstat (limited to 'rpcbind/rpcbind-CVE-2017-8779.patch')
| -rw-r--r-- | rpcbind/rpcbind-CVE-2017-8779.patch | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/rpcbind/rpcbind-CVE-2017-8779.patch b/rpcbind/rpcbind-CVE-2017-8779.patch new file mode 100644 index 000000000..5c58cab5f --- /dev/null +++ b/rpcbind/rpcbind-CVE-2017-8779.patch @@ -0,0 +1,24 @@ +# http://openwall.com/lists/oss-security/2017/05/03/12 +# https://github.com/guidovranken/rpcbomb + +diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c +index 5862c26..e11f61b 100644 +--- a/src/rpcb_svc_com.c ++++ b/src/rpcb_svc_com.c +@@ -48,6 +48,7 @@ + #include <rpc/rpc.h> + #include <rpc/rpcb_prot.h> + #include <rpc/svc_dg.h> ++#include <rpc/rpc_com.h> + #include <netconfig.h> + #include <errno.h> + #include <syslog.h> +@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/, + static bool_t + xdr_encap_parms(XDR *xdrs, struct encap_parms *epp) + { +- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0)); ++ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE)); + } + + /* |