Package: release.debian.org
Severity: important
User: release.debian....@packages.debian.org
Usertags: unblock

Please unblock package ntirpc

Hi,

ntirpc/1.4.4-1, which was uploaded some days ago to unstable fixes
release critical CVE-2017-8779 bug #861836.

Thanks

Christoph
-- 
============================================================================
Christoph Martin, Leiter Unix-Systeme
Zentrum für Datenverarbeitung, Uni-Mainz, Germany
 Anselm Franz von Bentzel-Weg 12, 55128 Mainz
 Telefon: +49(6131)3926337
 Instant-Messaging: Jabber: mar...@jabber.uni-mainz.de
  (Siehe http://www.zdv.uni-mainz.de/4010.php)
diff -Nru ntirpc-1.4.3/CMakeLists.txt ntirpc-1.4.4/CMakeLists.txt
--- ntirpc-1.4.3/CMakeLists.txt 2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/CMakeLists.txt 2017-05-05 21:07:02.000000000 +0200
@@ -15,7 +15,7 @@
 # version numbers
 set(NTIRPC_MAJOR_VERSION 1)
 set(NTIRPC_MINOR_VERSION 4)
-set(NTIRPC_PATCH_LEVEL 3)
+set(NTIRPC_PATCH_LEVEL 4)
 set(VERSION_COMMENT
   "Full-duplex and bi-directional ONC RPC on TCP."
 )
diff -Nru ntirpc-1.4.3/debian/changelog ntirpc-1.4.4/debian/changelog
--- ntirpc-1.4.3/debian/changelog       2017-04-07 13:54:21.000000000 +0200
+++ ntirpc-1.4.4/debian/changelog       2017-05-15 09:53:09.000000000 +0200
@@ -1,3 +1,11 @@
+ntirpc (1.4.4-1) unstable; urgency=high
+
+  [ Christoph Martin ]
+  * Imported Upstream version 1.4.4
+  * fixes rpcbomb CVE-2017-8779 (closes: #861836)
+
+ -- Christoph Martin <mar...@uni-mainz.de>  Mon, 15 May 2017 09:53:09 +0200
+
 ntirpc (1.4.3-3) unstable; urgency=medium
 
   * link with libatomic if necessary (closes: #859689)
diff -Nru ntirpc-1.4.3/debian/libntirpc1.4.symbols 
ntirpc-1.4.4/debian/libntirpc1.4.symbols
--- ntirpc-1.4.3/debian/libntirpc1.4.symbols    2017-04-07 13:54:21.000000000 
+0200
+++ ntirpc-1.4.4/debian/libntirpc1.4.symbols    2017-05-15 09:53:09.000000000 
+0200
@@ -1,253 +1,253 @@
 libntirpc.so.1.4 libntirpc1.4 #MINVER#
- NTIRPC_1.4.3@NTIRPC_1.4.3 1.4.3
+ NTIRPC_1.4.4@NTIRPC_1.4.4 1.4.4
  NTIRPC_PRIVATE@NTIRPC_PRIVATE 1.4.3
- __ntirpc_pkg_params@NTIRPC_1.4.3 1.4.3
- __rpc_createerr@NTIRPC_1.4.3 1.4.3
- __rpc_dtbsize@NTIRPC_1.4.3 1.4.3
- __rpc_endconf@NTIRPC_1.4.3 1.4.3
- __rpc_fd2sockinfo@NTIRPC_1.4.3 1.4.3
- __rpc_fixup_addr@NTIRPC_1.4.3 1.4.3
- __rpc_get_a_size@NTIRPC_1.4.3 1.4.3
- __rpc_get_local_uid@NTIRPC_1.4.3 1.4.3
- __rpc_get_t_size@NTIRPC_1.4.3 1.4.3
- __rpc_getconf@NTIRPC_1.4.3 1.4.3
- __rpc_getconfip@NTIRPC_1.4.3 1.4.3
- __rpc_nconf2fd@NTIRPC_1.4.3 1.4.3
- __rpc_nconf2fd_flags@NTIRPC_1.4.3 1.4.3
- __rpc_nconf2sockinfo@NTIRPC_1.4.3 1.4.3
- __rpc_rawcombuf@NTIRPC_1.4.3 1.4.3
- __rpc_seman2socktype@NTIRPC_1.4.3 1.4.3
- __rpc_setconf@NTIRPC_1.4.3 1.4.3
- __rpc_sockinfo2netid@NTIRPC_1.4.3 1.4.3
- __rpc_sockisbound@NTIRPC_1.4.3 1.4.3
- __rpc_socktype2seman@NTIRPC_1.4.3 1.4.3
- __rpc_taddr2uaddr_af@NTIRPC_1.4.3 1.4.3
- __rpc_uaddr2taddr_af@NTIRPC_1.4.3 1.4.3
- __rpcgettp@NTIRPC_1.4.3 1.4.3
- _get_next_token@NTIRPC_1.4.3 1.4.3
- _null_auth@NTIRPC_1.4.3 1.4.3
- _rpc_dtablesize@NTIRPC_1.4.3 1.4.3
- _seterr_reply@NTIRPC_1.4.3 1.4.3
- _svcauth_gss@NTIRPC_1.4.3 1.4.3
- _svcauth_none@NTIRPC_1.4.3 1.4.3
- _svcauth_short@NTIRPC_1.4.3 1.4.3
- _svcauth_unix@NTIRPC_1.4.3 1.4.3
- authgss_get_private_data@NTIRPC_1.4.3 1.4.3
- authgss_ncreate@NTIRPC_1.4.3 1.4.3
- authgss_ncreate_default@NTIRPC_1.4.3 1.4.3
- authgss_service@NTIRPC_1.4.3 1.4.3
- authnone_ncreate@NTIRPC_1.4.3 1.4.3
- authunix_ncreate@NTIRPC_1.4.3 1.4.3
- authunix_ncreate_default@NTIRPC_1.4.3 1.4.3
- bindresvport@NTIRPC_1.4.3 1.4.3
- bindresvport_sa@NTIRPC_1.4.3 1.4.3
- callrpc@NTIRPC_1.4.3 1.4.3
- clnt_broadcast@NTIRPC_1.4.3 1.4.3
- clnt_dg_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_ncreate_timed@NTIRPC_1.4.3 1.4.3
- clnt_ncreate_vers@NTIRPC_1.4.3 1.4.3
- clnt_ncreate_vers_timed@NTIRPC_1.4.3 1.4.3
- clnt_pcreateerror@NTIRPC_1.4.3 1.4.3
- clnt_perrno@NTIRPC_1.4.3 1.4.3
- clnt_perror@NTIRPC_1.4.3 1.4.3
- clnt_raw_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_spcreateerror@NTIRPC_1.4.3 1.4.3
- clnt_sperrno@NTIRPC_1.4.3 1.4.3
- clnt_sperror@NTIRPC_1.4.3 1.4.3
- clnt_tp_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_tp_ncreate_timed@NTIRPC_1.4.3 1.4.3
- clnt_vc_ncreate2@NTIRPC_1.4.3 1.4.3
- clnt_vc_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_vc_ncreate_svc@NTIRPC_1.4.3 1.4.3
- clntraw_ncreate@NTIRPC_1.4.3 1.4.3
- clnttcp_ncreate@NTIRPC_1.4.3 1.4.3
- clntudp_nbufcreate@NTIRPC_1.4.3 1.4.3
- clntudp_ncreate@NTIRPC_1.4.3 1.4.3
- clntunix_ncreate@NTIRPC_1.4.3 1.4.3
- endnetconfig@NTIRPC_1.4.3 1.4.3
- endnetpath@NTIRPC_1.4.3 1.4.3
- endrpcent@NTIRPC_1.4.3 1.4.3
- free_rpc_msg@NTIRPC_1.4.3 1.4.3
- freenetconfigent@NTIRPC_1.4.3 1.4.3
- get_myaddress@NTIRPC_1.4.3 1.4.3
- getnetconfig@NTIRPC_1.4.3 1.4.3
- getnetconfigent@NTIRPC_1.4.3 1.4.3
- getnetpath@NTIRPC_1.4.3 1.4.3
- getrpcent@NTIRPC_1.4.3 1.4.3
- getrpcport@NTIRPC_1.4.3 1.4.3
- nc_perror@NTIRPC_1.4.3 1.4.3
- nc_sperror@NTIRPC_1.4.3 1.4.3
- opr_rbtree_first@NTIRPC_1.4.3 1.4.3
- opr_rbtree_init@NTIRPC_1.4.3 1.4.3
- opr_rbtree_insert@NTIRPC_1.4.3 1.4.3
- opr_rbtree_insert_at@NTIRPC_1.4.3 1.4.3
- opr_rbtree_last@NTIRPC_1.4.3 1.4.3
- opr_rbtree_lookup@NTIRPC_1.4.3 1.4.3
- opr_rbtree_next@NTIRPC_1.4.3 1.4.3
- opr_rbtree_prev@NTIRPC_1.4.3 1.4.3
- opr_rbtree_remove@NTIRPC_1.4.3 1.4.3
- opr_rbtree_replace@NTIRPC_1.4.3 1.4.3
- pmap_getmaps@NTIRPC_1.4.3 1.4.3
- pmap_getport@NTIRPC_1.4.3 1.4.3
- pmap_rmtcall@NTIRPC_1.4.3 1.4.3
- pmap_set@NTIRPC_1.4.3 1.4.3
- pmap_unset@NTIRPC_1.4.3 1.4.3
- rbtx_init@NTIRPC_1.4.3 1.4.3
- registerrpc@NTIRPC_1.4.3 1.4.3
- rpc_broadcast@NTIRPC_1.4.3 1.4.3
- rpc_broadcast_exp@NTIRPC_1.4.3 1.4.3
- rpc_call@NTIRPC_1.4.3 1.4.3
- rpc_control@NTIRPC_1.4.3 1.4.3
- rpc_createerr@NTIRPC_1.4.3 1.4.3
- rpc_nullproc@NTIRPC_1.4.3 1.4.3
- rpc_reg@NTIRPC_1.4.3 1.4.3
- rpcb_find_mapped_addr@NTIRPC_1.4.3 1.4.3
- rpcb_getaddr@NTIRPC_1.4.3 1.4.3
- rpcb_getmaps@NTIRPC_1.4.3 1.4.3
- rpcb_rmtcall@NTIRPC_1.4.3 1.4.3
- rpcb_set@NTIRPC_1.4.3 1.4.3
- rpcb_taddr2uaddr@NTIRPC_1.4.3 1.4.3
- rpcb_uaddr2taddr@NTIRPC_1.4.3 1.4.3
- rpcb_unset@NTIRPC_1.4.3 1.4.3
- setnetconfig@NTIRPC_1.4.3 1.4.3
- setnetpath@NTIRPC_1.4.3 1.4.3
- setrpcent@NTIRPC_1.4.3 1.4.3
- svc_auth_authenticate@NTIRPC_1.4.3 1.4.3
- svc_auth_reg@NTIRPC_1.4.3 1.4.3
- svc_dg_ncreate@NTIRPC_1.4.3 1.4.3
- svc_exit@NTIRPC_1.4.3 1.4.3
- svc_fd_ncreate2@NTIRPC_1.4.3 1.4.3
- svc_fd_ncreate@NTIRPC_1.4.3 1.4.3
- svc_init@NTIRPC_1.4.3 1.4.3
- svc_ncreate@NTIRPC_1.4.3 1.4.3
- svc_raw_ncreate@NTIRPC_1.4.3 1.4.3
- svc_reg@NTIRPC_1.4.3 1.4.3
- svc_register@NTIRPC_1.4.3 1.4.3
- svc_rqst_evchan_reg@NTIRPC_1.4.3 1.4.3
- svc_rqst_new_evchan@NTIRPC_1.4.3 1.4.3
- svc_rqst_rearm_events@NTIRPC_1.4.3 1.4.3
- svc_rqst_thrd_run@NTIRPC_1.4.3 1.4.3
- svc_rqst_thrd_signal@NTIRPC_1.4.3 1.4.3
- svc_run@NTIRPC_1.4.3 1.4.3
- svc_run_epoll@NTIRPC_1.4.3 1.4.3
- svc_sendreply@NTIRPC_1.4.3 1.4.3
- svc_shutdown@NTIRPC_1.4.3 1.4.3
- svc_tli_ncreate@NTIRPC_1.4.3 1.4.3
- svc_tp_ncreate@NTIRPC_1.4.3 1.4.3
- svc_unreg@NTIRPC_1.4.3 1.4.3
- svc_unregister@NTIRPC_1.4.3 1.4.3
- svc_validate_xprt_list@NTIRPC_1.4.3 1.4.3
- svc_vc_ncreate2@NTIRPC_1.4.3 1.4.3
- svc_vc_ncreate@NTIRPC_1.4.3 1.4.3
- svc_xprt_trace@NTIRPC_1.4.3 1.4.3
- svcauth_gss_acquire_cred@NTIRPC_1.4.3 1.4.3
- svcauth_gss_destroy@NTIRPC_1.4.3 1.4.3
- svcauth_gss_get_principal@NTIRPC_1.4.3 1.4.3
- svcauth_gss_import_name@NTIRPC_1.4.3 1.4.3
- svcauth_gss_nextverf@NTIRPC_1.4.3 1.4.3
- svcauth_gss_release_cred@NTIRPC_1.4.3 1.4.3
- svcauth_gss_set_svc_name@NTIRPC_1.4.3 1.4.3
- svcerr_auth@NTIRPC_1.4.3 1.4.3
- svcerr_decode@NTIRPC_1.4.3 1.4.3
- svcerr_noproc@NTIRPC_1.4.3 1.4.3
- svcerr_noprog@NTIRPC_1.4.3 1.4.3
- svcerr_progvers@NTIRPC_1.4.3 1.4.3
- svcerr_systemerr@NTIRPC_1.4.3 1.4.3
- svcerr_weakauth@NTIRPC_1.4.3 1.4.3
- svcraw_ncreate@NTIRPC_1.4.3 1.4.3
- svctcp_ncreate@NTIRPC_1.4.3 1.4.3
- svcudp_nbufcreate@NTIRPC_1.4.3 1.4.3
- svcudp_ncreate@NTIRPC_1.4.3 1.4.3
- svcunix_ncreate@NTIRPC_1.4.3 1.4.3
- svcunixfd_ncreate@NTIRPC_1.4.3 1.4.3
- taddr2uaddr@NTIRPC_1.4.3 1.4.3
- tirpc_control@NTIRPC_1.4.3 1.4.3
- uaddr2taddr@NTIRPC_1.4.3 1.4.3
- xdr_array@NTIRPC_1.4.3 1.4.3
- xdr_authunix_parms@NTIRPC_1.4.3 1.4.3
- xdr_bool@NTIRPC_1.4.3 1.4.3
- xdr_bytes@NTIRPC_1.4.3 1.4.3
- xdr_call_decode@NTIRPC_1.4.3 1.4.3
- xdr_call_encode@NTIRPC_1.4.3 1.4.3
- xdr_char@NTIRPC_1.4.3 1.4.3
- xdr_double@NTIRPC_1.4.3 1.4.3
- xdr_dplx_decode@NTIRPC_1.4.3 1.4.3
- xdr_dplx_msg@NTIRPC_1.4.3 1.4.3
- xdr_enum@NTIRPC_1.4.3 1.4.3
- xdr_float@NTIRPC_1.4.3 1.4.3
- xdr_free_null_stream@NTIRPC_1.4.3 1.4.3
- xdr_hyper@NTIRPC_1.4.3 1.4.3
- xdr_inrec_cksum@NTIRPC_1.4.3 1.4.3
- xdr_inrec_create@NTIRPC_1.4.3 1.4.3
- xdr_inrec_eof@NTIRPC_1.4.3 1.4.3
- xdr_inrec_readahead@NTIRPC_1.4.3 1.4.3
- xdr_inrec_skiprecord@NTIRPC_1.4.3 1.4.3
- xdr_int16_t@NTIRPC_1.4.3 1.4.3
- xdr_int32_t@NTIRPC_1.4.3 1.4.3
- xdr_int64_t@NTIRPC_1.4.3 1.4.3
- xdr_int@NTIRPC_1.4.3 1.4.3
- xdr_long@NTIRPC_1.4.3 1.4.3
- xdr_longlong_t@NTIRPC_1.4.3 1.4.3
- xdr_naccepted_reply@NTIRPC_1.4.3 1.4.3
- xdr_ncallhdr@NTIRPC_1.4.3 1.4.3
- xdr_ncallmsg@NTIRPC_1.4.3 1.4.3
- xdr_netbuf@NTIRPC_1.4.3 1.4.3
- xdr_nnetobj@NTIRPC_1.4.3 1.4.3
- xdr_nrejected_reply@NTIRPC_1.4.3 1.4.3
- xdr_nreplymsg@NTIRPC_1.4.3 1.4.3
- xdr_opaque@NTIRPC_1.4.3 1.4.3
- xdr_opaque_auth@NTIRPC_1.4.3 1.4.3
- xdr_pmap@NTIRPC_1.4.3 1.4.3
- xdr_pmaplist@NTIRPC_1.4.3 1.4.3
- xdr_pmaplist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_pointer@NTIRPC_1.4.3 1.4.3
- xdr_reference@NTIRPC_1.4.3 1.4.3
- xdr_rmtcall_args@NTIRPC_1.4.3 1.4.3
- xdr_rmtcallres@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_buf@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_cred@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_data@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_init_args@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_init_res@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_unwrap_data@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_wrap_data@NTIRPC_1.4.3 1.4.3
- xdr_rpcb@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_entry@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_entry_list_ptr@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_rmtcallargs@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_rmtcallres@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_stat@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_stat_byvers@NTIRPC_1.4.3 1.4.3
- xdr_rpcblist@NTIRPC_1.4.3 1.4.3
- xdr_rpcblist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_addrlist@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_addrlist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_proc@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_rmtcalllist@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_rmtcalllist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_short@NTIRPC_1.4.3 1.4.3
- xdr_string@NTIRPC_1.4.3 1.4.3
- xdr_u_char@NTIRPC_1.4.3 1.4.3
- xdr_u_hyper@NTIRPC_1.4.3 1.4.3
- xdr_u_int16_t@NTIRPC_1.4.3 1.4.3
- xdr_u_int32_t@NTIRPC_1.4.3 1.4.3
- xdr_u_int64_t@NTIRPC_1.4.3 1.4.3
- xdr_u_int@NTIRPC_1.4.3 1.4.3
- xdr_u_long@NTIRPC_1.4.3 1.4.3
- xdr_u_longlong_t@NTIRPC_1.4.3 1.4.3
- xdr_u_short@NTIRPC_1.4.3 1.4.3
- xdr_uint32_t@NTIRPC_1.4.3 1.4.3
- xdr_uint64_t@NTIRPC_1.4.3 1.4.3
- xdr_union@NTIRPC_1.4.3 1.4.3
- xdr_vector@NTIRPC_1.4.3 1.4.3
- xdr_void@NTIRPC_1.4.3 1.4.3
- xdr_wrapstring@NTIRPC_1.4.3 1.4.3
- xdrmem_ncreate@NTIRPC_1.4.3 1.4.3
- xdrrec_create@NTIRPC_1.4.3 1.4.3
- xdrrec_endofrecord@NTIRPC_1.4.3 1.4.3
- xdrrec_eof@NTIRPC_1.4.3 1.4.3
- xdrrec_skiprecord@NTIRPC_1.4.3 1.4.3
- xdrstdio_create@NTIRPC_1.4.3 1.4.3
- xprt_register@NTIRPC_1.4.3 1.4.3
- xprt_unregister@NTIRPC_1.4.3 1.4.3
+ __ntirpc_pkg_params@NTIRPC_1.4.4 1.4.4
+ __rpc_createerr@NTIRPC_1.4.4 1.4.4
+ __rpc_dtbsize@NTIRPC_1.4.4 1.4.4
+ __rpc_endconf@NTIRPC_1.4.4 1.4.4
+ __rpc_fd2sockinfo@NTIRPC_1.4.4 1.4.4
+ __rpc_fixup_addr@NTIRPC_1.4.4 1.4.4
+ __rpc_get_a_size@NTIRPC_1.4.4 1.4.4
+ __rpc_get_local_uid@NTIRPC_1.4.4 1.4.4
+ __rpc_get_t_size@NTIRPC_1.4.4 1.4.4
+ __rpc_getconf@NTIRPC_1.4.4 1.4.4
+ __rpc_getconfip@NTIRPC_1.4.4 1.4.4
+ __rpc_nconf2fd@NTIRPC_1.4.4 1.4.4
+ __rpc_nconf2fd_flags@NTIRPC_1.4.4 1.4.4
+ __rpc_nconf2sockinfo@NTIRPC_1.4.4 1.4.4
+ __rpc_rawcombuf@NTIRPC_1.4.4 1.4.4
+ __rpc_seman2socktype@NTIRPC_1.4.4 1.4.4
+ __rpc_setconf@NTIRPC_1.4.4 1.4.4
+ __rpc_sockinfo2netid@NTIRPC_1.4.4 1.4.4
+ __rpc_sockisbound@NTIRPC_1.4.4 1.4.4
+ __rpc_socktype2seman@NTIRPC_1.4.4 1.4.4
+ __rpc_taddr2uaddr_af@NTIRPC_1.4.4 1.4.4
+ __rpc_uaddr2taddr_af@NTIRPC_1.4.4 1.4.4
+ __rpcgettp@NTIRPC_1.4.4 1.4.4
+ _get_next_token@NTIRPC_1.4.4 1.4.4
+ _null_auth@NTIRPC_1.4.4 1.4.4
+ _rpc_dtablesize@NTIRPC_1.4.4 1.4.4
+ _seterr_reply@NTIRPC_1.4.4 1.4.4
+ _svcauth_gss@NTIRPC_1.4.4 1.4.4
+ _svcauth_none@NTIRPC_1.4.4 1.4.4
+ _svcauth_short@NTIRPC_1.4.4 1.4.4
+ _svcauth_unix@NTIRPC_1.4.4 1.4.4
+ authgss_get_private_data@NTIRPC_1.4.4 1.4.4
+ authgss_ncreate@NTIRPC_1.4.4 1.4.4
+ authgss_ncreate_default@NTIRPC_1.4.4 1.4.4
+ authgss_service@NTIRPC_1.4.4 1.4.4
+ authnone_ncreate@NTIRPC_1.4.4 1.4.4
+ authunix_ncreate@NTIRPC_1.4.4 1.4.4
+ authunix_ncreate_default@NTIRPC_1.4.4 1.4.4
+ bindresvport@NTIRPC_1.4.4 1.4.4
+ bindresvport_sa@NTIRPC_1.4.4 1.4.4
+ callrpc@NTIRPC_1.4.4 1.4.4
+ clnt_broadcast@NTIRPC_1.4.4 1.4.4
+ clnt_dg_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate_timed@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate_vers@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate_vers_timed@NTIRPC_1.4.4 1.4.4
+ clnt_pcreateerror@NTIRPC_1.4.4 1.4.4
+ clnt_perrno@NTIRPC_1.4.4 1.4.4
+ clnt_perror@NTIRPC_1.4.4 1.4.4
+ clnt_raw_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_spcreateerror@NTIRPC_1.4.4 1.4.4
+ clnt_sperrno@NTIRPC_1.4.4 1.4.4
+ clnt_sperror@NTIRPC_1.4.4 1.4.4
+ clnt_tp_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_tp_ncreate_timed@NTIRPC_1.4.4 1.4.4
+ clnt_vc_ncreate2@NTIRPC_1.4.4 1.4.4
+ clnt_vc_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_vc_ncreate_svc@NTIRPC_1.4.4 1.4.4
+ clntraw_ncreate@NTIRPC_1.4.4 1.4.4
+ clnttcp_ncreate@NTIRPC_1.4.4 1.4.4
+ clntudp_nbufcreate@NTIRPC_1.4.4 1.4.4
+ clntudp_ncreate@NTIRPC_1.4.4 1.4.4
+ clntunix_ncreate@NTIRPC_1.4.4 1.4.4
+ endnetconfig@NTIRPC_1.4.4 1.4.4
+ endnetpath@NTIRPC_1.4.4 1.4.4
+ endrpcent@NTIRPC_1.4.4 1.4.4
+ free_rpc_msg@NTIRPC_1.4.4 1.4.4
+ freenetconfigent@NTIRPC_1.4.4 1.4.4
+ get_myaddress@NTIRPC_1.4.4 1.4.4
+ getnetconfig@NTIRPC_1.4.4 1.4.4
+ getnetconfigent@NTIRPC_1.4.4 1.4.4
+ getnetpath@NTIRPC_1.4.4 1.4.4
+ getrpcent@NTIRPC_1.4.4 1.4.4
+ getrpcport@NTIRPC_1.4.4 1.4.4
+ nc_perror@NTIRPC_1.4.4 1.4.4
+ nc_sperror@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_first@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_init@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_insert@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_insert_at@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_last@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_lookup@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_next@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_prev@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_remove@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_replace@NTIRPC_1.4.4 1.4.4
+ pmap_getmaps@NTIRPC_1.4.4 1.4.4
+ pmap_getport@NTIRPC_1.4.4 1.4.4
+ pmap_rmtcall@NTIRPC_1.4.4 1.4.4
+ pmap_set@NTIRPC_1.4.4 1.4.4
+ pmap_unset@NTIRPC_1.4.4 1.4.4
+ rbtx_init@NTIRPC_1.4.4 1.4.4
+ registerrpc@NTIRPC_1.4.4 1.4.4
+ rpc_broadcast@NTIRPC_1.4.4 1.4.4
+ rpc_broadcast_exp@NTIRPC_1.4.4 1.4.4
+ rpc_call@NTIRPC_1.4.4 1.4.4
+ rpc_control@NTIRPC_1.4.4 1.4.4
+ rpc_createerr@NTIRPC_1.4.4 1.4.4
+ rpc_nullproc@NTIRPC_1.4.4 1.4.4
+ rpc_reg@NTIRPC_1.4.4 1.4.4
+ rpcb_find_mapped_addr@NTIRPC_1.4.4 1.4.4
+ rpcb_getaddr@NTIRPC_1.4.4 1.4.4
+ rpcb_getmaps@NTIRPC_1.4.4 1.4.4
+ rpcb_rmtcall@NTIRPC_1.4.4 1.4.4
+ rpcb_set@NTIRPC_1.4.4 1.4.4
+ rpcb_taddr2uaddr@NTIRPC_1.4.4 1.4.4
+ rpcb_uaddr2taddr@NTIRPC_1.4.4 1.4.4
+ rpcb_unset@NTIRPC_1.4.4 1.4.4
+ setnetconfig@NTIRPC_1.4.4 1.4.4
+ setnetpath@NTIRPC_1.4.4 1.4.4
+ setrpcent@NTIRPC_1.4.4 1.4.4
+ svc_auth_authenticate@NTIRPC_1.4.4 1.4.4
+ svc_auth_reg@NTIRPC_1.4.4 1.4.4
+ svc_dg_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_exit@NTIRPC_1.4.4 1.4.4
+ svc_fd_ncreate2@NTIRPC_1.4.4 1.4.4
+ svc_fd_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_init@NTIRPC_1.4.4 1.4.4
+ svc_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_raw_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_reg@NTIRPC_1.4.4 1.4.4
+ svc_register@NTIRPC_1.4.4 1.4.4
+ svc_rqst_evchan_reg@NTIRPC_1.4.4 1.4.4
+ svc_rqst_new_evchan@NTIRPC_1.4.4 1.4.4
+ svc_rqst_rearm_events@NTIRPC_1.4.4 1.4.4
+ svc_rqst_thrd_run@NTIRPC_1.4.4 1.4.4
+ svc_rqst_thrd_signal@NTIRPC_1.4.4 1.4.4
+ svc_run@NTIRPC_1.4.4 1.4.4
+ svc_run_epoll@NTIRPC_1.4.4 1.4.4
+ svc_sendreply@NTIRPC_1.4.4 1.4.4
+ svc_shutdown@NTIRPC_1.4.4 1.4.4
+ svc_tli_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_tp_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_unreg@NTIRPC_1.4.4 1.4.4
+ svc_unregister@NTIRPC_1.4.4 1.4.4
+ svc_validate_xprt_list@NTIRPC_1.4.4 1.4.4
+ svc_vc_ncreate2@NTIRPC_1.4.4 1.4.4
+ svc_vc_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_xprt_trace@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_acquire_cred@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_destroy@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_get_principal@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_import_name@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_nextverf@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_release_cred@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_set_svc_name@NTIRPC_1.4.4 1.4.4
+ svcerr_auth@NTIRPC_1.4.4 1.4.4
+ svcerr_decode@NTIRPC_1.4.4 1.4.4
+ svcerr_noproc@NTIRPC_1.4.4 1.4.4
+ svcerr_noprog@NTIRPC_1.4.4 1.4.4
+ svcerr_progvers@NTIRPC_1.4.4 1.4.4
+ svcerr_systemerr@NTIRPC_1.4.4 1.4.4
+ svcerr_weakauth@NTIRPC_1.4.4 1.4.4
+ svcraw_ncreate@NTIRPC_1.4.4 1.4.4
+ svctcp_ncreate@NTIRPC_1.4.4 1.4.4
+ svcudp_nbufcreate@NTIRPC_1.4.4 1.4.4
+ svcudp_ncreate@NTIRPC_1.4.4 1.4.4
+ svcunix_ncreate@NTIRPC_1.4.4 1.4.4
+ svcunixfd_ncreate@NTIRPC_1.4.4 1.4.4
+ taddr2uaddr@NTIRPC_1.4.4 1.4.4
+ tirpc_control@NTIRPC_1.4.4 1.4.4
+ uaddr2taddr@NTIRPC_1.4.4 1.4.4
+ xdr_array@NTIRPC_1.4.4 1.4.4
+ xdr_authunix_parms@NTIRPC_1.4.4 1.4.4
+ xdr_bool@NTIRPC_1.4.4 1.4.4
+ xdr_bytes@NTIRPC_1.4.4 1.4.4
+ xdr_call_decode@NTIRPC_1.4.4 1.4.4
+ xdr_call_encode@NTIRPC_1.4.4 1.4.4
+ xdr_char@NTIRPC_1.4.4 1.4.4
+ xdr_double@NTIRPC_1.4.4 1.4.4
+ xdr_dplx_decode@NTIRPC_1.4.4 1.4.4
+ xdr_dplx_msg@NTIRPC_1.4.4 1.4.4
+ xdr_enum@NTIRPC_1.4.4 1.4.4
+ xdr_float@NTIRPC_1.4.4 1.4.4
+ xdr_free_null_stream@NTIRPC_1.4.4 1.4.4
+ xdr_hyper@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_cksum@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_create@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_eof@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_readahead@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_skiprecord@NTIRPC_1.4.4 1.4.4
+ xdr_int16_t@NTIRPC_1.4.4 1.4.4
+ xdr_int32_t@NTIRPC_1.4.4 1.4.4
+ xdr_int64_t@NTIRPC_1.4.4 1.4.4
+ xdr_int@NTIRPC_1.4.4 1.4.4
+ xdr_long@NTIRPC_1.4.4 1.4.4
+ xdr_longlong_t@NTIRPC_1.4.4 1.4.4
+ xdr_naccepted_reply@NTIRPC_1.4.4 1.4.4
+ xdr_ncallhdr@NTIRPC_1.4.4 1.4.4
+ xdr_ncallmsg@NTIRPC_1.4.4 1.4.4
+ xdr_netbuf@NTIRPC_1.4.4 1.4.4
+ xdr_nnetobj@NTIRPC_1.4.4 1.4.4
+ xdr_nrejected_reply@NTIRPC_1.4.4 1.4.4
+ xdr_nreplymsg@NTIRPC_1.4.4 1.4.4
+ xdr_opaque@NTIRPC_1.4.4 1.4.4
+ xdr_opaque_auth@NTIRPC_1.4.4 1.4.4
+ xdr_pmap@NTIRPC_1.4.4 1.4.4
+ xdr_pmaplist@NTIRPC_1.4.4 1.4.4
+ xdr_pmaplist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_pointer@NTIRPC_1.4.4 1.4.4
+ xdr_reference@NTIRPC_1.4.4 1.4.4
+ xdr_rmtcall_args@NTIRPC_1.4.4 1.4.4
+ xdr_rmtcallres@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_buf@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_cred@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_data@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_init_args@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_init_res@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_unwrap_data@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_wrap_data@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_entry@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_entry_list_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_rmtcallargs@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_rmtcallres@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_stat@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_stat_byvers@NTIRPC_1.4.4 1.4.4
+ xdr_rpcblist@NTIRPC_1.4.4 1.4.4
+ xdr_rpcblist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_addrlist@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_addrlist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_proc@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_rmtcalllist@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_rmtcalllist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_short@NTIRPC_1.4.4 1.4.4
+ xdr_string@NTIRPC_1.4.4 1.4.4
+ xdr_u_char@NTIRPC_1.4.4 1.4.4
+ xdr_u_hyper@NTIRPC_1.4.4 1.4.4
+ xdr_u_int16_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_int32_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_int64_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_int@NTIRPC_1.4.4 1.4.4
+ xdr_u_long@NTIRPC_1.4.4 1.4.4
+ xdr_u_longlong_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_short@NTIRPC_1.4.4 1.4.4
+ xdr_uint32_t@NTIRPC_1.4.4 1.4.4
+ xdr_uint64_t@NTIRPC_1.4.4 1.4.4
+ xdr_union@NTIRPC_1.4.4 1.4.4
+ xdr_vector@NTIRPC_1.4.4 1.4.4
+ xdr_void@NTIRPC_1.4.4 1.4.4
+ xdr_wrapstring@NTIRPC_1.4.4 1.4.4
+ xdrmem_ncreate@NTIRPC_1.4.4 1.4.4
+ xdrrec_create@NTIRPC_1.4.4 1.4.4
+ xdrrec_endofrecord@NTIRPC_1.4.4 1.4.4
+ xdrrec_eof@NTIRPC_1.4.4 1.4.4
+ xdrrec_skiprecord@NTIRPC_1.4.4 1.4.4
+ xdrstdio_create@NTIRPC_1.4.4 1.4.4
+ xprt_register@NTIRPC_1.4.4 1.4.4
+ xprt_unregister@NTIRPC_1.4.4 1.4.4
diff -Nru ntirpc-1.4.3/ntirpc/rpc/xdr_inline.h 
ntirpc-1.4.4/ntirpc/rpc/xdr_inline.h
--- ntirpc-1.4.3/ntirpc/rpc/xdr_inline.h        2016-10-25 20:15:56.000000000 
+0200
+++ ntirpc-1.4.4/ntirpc/rpc/xdr_inline.h        2017-05-05 21:07:02.000000000 
+0200
@@ -56,7 +56,7 @@
  */
 #define XDR_FALSE ((long) 0)
 #define XDR_TRUE ((long) 1)
-#define LASTUNSIGNED ((u_int) 0-1)
+#define RPC_MAXDATASIZE 9000
 
 /*
  * Free a data structure using XDR
@@ -544,6 +544,7 @@
 {
        char *sp = *cpp;        /* sp is the actual string pointer */
        u_int nodesize;
+       bool ret;
 
        /*
         * first deal with the length since xdr bytes are counted
@@ -564,7 +565,12 @@
                        return (true);
                if (sp == NULL)
                        *cpp = sp = (char *)mem_alloc(nodesize);
-               return (inline_xdr_getopaque(xdrs, sp, nodesize));
+               ret = inline_xdr_getopaque(xdrs, sp, nodesize);
+               if (! ret) {
+                       free(sp);
+                       *cpp = NULL;
+               }
+               return (ret);
 
        case XDR_ENCODE:
                return (inline_xdr_putopaque(xdrs, sp, nodesize));
@@ -653,6 +659,7 @@
        char *sp = *cpp;        /* sp is the actual string pointer */
        u_int size = 0;         /* XXX remove warning */
        u_int nodesize;
+       bool ret;
 
        /*
         * first deal with the length since xdr strings are counted-strings
@@ -691,8 +698,13 @@
        case XDR_DECODE:
                if (sp == NULL)
                        *cpp = sp = (char *)mem_alloc(nodesize);
-               sp[size] = 0;
-               return (inline_xdr_getopaque(xdrs, sp, size));
+               ret = inline_xdr_getopaque(xdrs, sp, size);
+               if (! ret) {
+                       free(sp);
+                       *cpp = NULL;
+               } else
+                       sp[size] = 0;
+               return (ret);
 
        case XDR_ENCODE:
                return (inline_xdr_putopaque(xdrs, sp, size));
@@ -713,7 +725,7 @@
 static inline bool
 inline_xdr_wrapstring(XDR *xdrs, char **cpp)
 {
-       return inline_xdr_string(xdrs, cpp, LASTUNSIGNED);
+       return inline_xdr_string(xdrs, cpp, RPC_MAXDATASIZE);
 }
 
 /*
diff -Nru ntirpc-1.4.3/src/rpcb_st_xdr.c ntirpc-1.4.4/src/rpcb_st_xdr.c
--- ntirpc-1.4.3/src/rpcb_st_xdr.c      2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/src/rpcb_st_xdr.c      2017-05-05 21:07:02.000000000 +0200
@@ -39,6 +39,8 @@
 #include <sys/cdefs.h>
 
 #include <rpc/rpc.h>
+#include <rpc/xdr.h>
+#include <rpc/xdr_inline.h>
 
 /* Link list of all the stats about getport and getaddr */
 
@@ -53,7 +55,7 @@
                return (false);
        if (!xdr_int(xdrs, &objp->failure))
                return (false);
-       if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+       if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
                return (false);
        if (!xdr_pointer
            (xdrs, (char **)&objp->next, sizeof(rpcbs_addrlist),
@@ -93,7 +95,7 @@
                        IXDR_PUT_INT32(buf, objp->failure);
                        IXDR_PUT_INT32(buf, objp->indirect);
                }
-               if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+               if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
                        return (false);
                if (!xdr_pointer
                    (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist),
@@ -123,7 +125,7 @@
                        objp->failure = (int)IXDR_GET_INT32(buf);
                        objp->indirect = (int)IXDR_GET_INT32(buf);
                }
-               if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+               if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
                        return (false);
                if (!xdr_pointer
                    (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist),
@@ -143,7 +145,7 @@
                return (false);
        if (!xdr_int(xdrs, &objp->indirect))
                return (false);
-       if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+       if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
                return (false);
        if (!xdr_pointer
            (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist),
diff -Nru ntirpc-1.4.3/src/rpc_generic.c ntirpc-1.4.4/src/rpc_generic.c
--- ntirpc-1.4.3/src/rpc_generic.c      2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/src/rpc_generic.c      2017-05-05 21:07:02.000000000 +0200
@@ -747,6 +747,8 @@
 
        switch (af) {
        case AF_INET:
+               if (nbuf->len < sizeof(*sin))
+                       return NULL;
                sin = nbuf->buf;
                if (inet_ntop(af, &sin->sin_addr, namebuf, sizeof(namebuf))
                    == NULL)
@@ -761,6 +763,8 @@
                break;
 #ifdef INET6
        case AF_INET6:
+               if (nbuf->len < sizeof(*sin6))
+                       return NULL;
                sin6 = nbuf->buf;
                if (inet_ntop(af, &sin6->sin6_addr, namebuf6, sizeof(namebuf6))
                    == NULL) {
@@ -827,6 +831,8 @@
 
        port = 0;
        sin = NULL;
+       if (uaddr == NULL)
+               return NULL;
        addrstr = mem_strdup(uaddr);
 
        /*
diff -Nru ntirpc-1.4.3/src/xdr.c ntirpc-1.4.4/src/xdr.c
--- ntirpc-1.4.3/src/xdr.c      2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/src/xdr.c      2017-05-05 21:07:02.000000000 +0200
@@ -56,7 +56,7 @@
  */
 #define XDR_FALSE ((long) 0)
 #define XDR_TRUE ((long) 1)
-#define LASTUNSIGNED ((u_int) 0-1)
+#define RPC_MAXDATASIZE 9000
 
 /*
  * for unit alignment
@@ -504,6 +504,7 @@
 {
        char *sp = *cpp;        /* sp is the actual string pointer */
        u_int nodesize;
+       bool ret, allocated = false;
 
        /*
         * first deal with the length since xdr bytes are counted
@@ -523,12 +524,21 @@
        case XDR_DECODE:
                if (nodesize == 0)
                        return (true);
-               if (sp == NULL)
+               if (sp == NULL) {
                        *cpp = sp = mem_alloc(nodesize);
+                       allocated = true;
+               }
                /* FALLTHROUGH */
 
        case XDR_ENCODE:
-               return (xdr_opaque(xdrs, sp, nodesize));
+               ret = xdr_opaque(xdrs, sp, nodesize);
+               if ((xdrs->x_op == XDR_DECODE) && (ret == false)) {
+                       if (allocated) {
+                               free(sp);
+                               *cpp = NULL;
+                       }
+               }
+               return (ret);
 
        case XDR_FREE:
                if (sp != NULL) {
@@ -611,6 +621,7 @@
        char *sp = *cpp;        /* sp is the actual string pointer */
        u_int size = 0;
        u_int nodesize;
+       bool ret, allocated = false;
 
        /*
         * first deal with the length since xdr strings are counted-strings
@@ -647,13 +658,22 @@
        switch (xdrs->x_op) {
 
        case XDR_DECODE:
-               if (sp == NULL)
+               if (sp == NULL) {
                        *cpp = sp = mem_alloc(nodesize);
+                       allocated = true;
+               }
                sp[size] = 0;
                /* FALLTHROUGH */
 
        case XDR_ENCODE:
-               return (xdr_opaque(xdrs, sp, size));
+               ret = xdr_opaque(xdrs, sp, size);
+               if ((xdrs->x_op == XDR_DECODE) && (ret == false)) {
+                       if (allocated) {
+                               free(sp);
+                               *cpp = NULL;
+                       }
+               }
+               return (ret);
 
        case XDR_FREE:
                mem_free(sp, nodesize);
@@ -671,7 +691,7 @@
 bool
 xdr_wrapstring(XDR *xdrs, char **cpp)
 {
-       return xdr_string(xdrs, cpp, LASTUNSIGNED);
+       return xdr_string(xdrs, cpp, RPC_MAXDATASIZE);
 }
 
 /*

<<attachment: martin.vcf>>

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to