Package: release.debian.org Severity: important User: release.debian....@packages.debian.org Usertags: unblock
Please unblock package ntirpc Hi, ntirpc/1.4.4-1, which was uploaded some days ago to unstable fixes release critical CVE-2017-8779 bug #861836. Thanks Christoph -- ============================================================================ Christoph Martin, Leiter Unix-Systeme Zentrum für Datenverarbeitung, Uni-Mainz, Germany Anselm Franz von Bentzel-Weg 12, 55128 Mainz Telefon: +49(6131)3926337 Instant-Messaging: Jabber: mar...@jabber.uni-mainz.de (Siehe http://www.zdv.uni-mainz.de/4010.php)
diff -Nru ntirpc-1.4.3/CMakeLists.txt ntirpc-1.4.4/CMakeLists.txt --- ntirpc-1.4.3/CMakeLists.txt 2016-10-25 20:15:56.000000000 +0200 +++ ntirpc-1.4.4/CMakeLists.txt 2017-05-05 21:07:02.000000000 +0200 @@ -15,7 +15,7 @@ # version numbers set(NTIRPC_MAJOR_VERSION 1) set(NTIRPC_MINOR_VERSION 4) -set(NTIRPC_PATCH_LEVEL 3) +set(NTIRPC_PATCH_LEVEL 4) set(VERSION_COMMENT "Full-duplex and bi-directional ONC RPC on TCP." ) diff -Nru ntirpc-1.4.3/debian/changelog ntirpc-1.4.4/debian/changelog --- ntirpc-1.4.3/debian/changelog 2017-04-07 13:54:21.000000000 +0200 +++ ntirpc-1.4.4/debian/changelog 2017-05-15 09:53:09.000000000 +0200 @@ -1,3 +1,11 @@ +ntirpc (1.4.4-1) unstable; urgency=high + + [ Christoph Martin ] + * Imported Upstream version 1.4.4 + * fixes rpcbomb CVE-2017-8779 (closes: #861836) + + -- Christoph Martin <mar...@uni-mainz.de> Mon, 15 May 2017 09:53:09 +0200 + ntirpc (1.4.3-3) unstable; urgency=medium * link with libatomic if necessary (closes: #859689) diff -Nru ntirpc-1.4.3/debian/libntirpc1.4.symbols ntirpc-1.4.4/debian/libntirpc1.4.symbols --- ntirpc-1.4.3/debian/libntirpc1.4.symbols 2017-04-07 13:54:21.000000000 +0200 +++ ntirpc-1.4.4/debian/libntirpc1.4.symbols 2017-05-15 09:53:09.000000000 +0200 @@ -1,253 +1,253 @@ libntirpc.so.1.4 libntirpc1.4 #MINVER# - NTIRPC_1.4.3@NTIRPC_1.4.3 1.4.3 + NTIRPC_1.4.4@NTIRPC_1.4.4 1.4.4 NTIRPC_PRIVATE@NTIRPC_PRIVATE 1.4.3 - __ntirpc_pkg_params@NTIRPC_1.4.3 1.4.3 - __rpc_createerr@NTIRPC_1.4.3 1.4.3 - __rpc_dtbsize@NTIRPC_1.4.3 1.4.3 - __rpc_endconf@NTIRPC_1.4.3 1.4.3 - __rpc_fd2sockinfo@NTIRPC_1.4.3 1.4.3 - __rpc_fixup_addr@NTIRPC_1.4.3 1.4.3 - __rpc_get_a_size@NTIRPC_1.4.3 1.4.3 - __rpc_get_local_uid@NTIRPC_1.4.3 1.4.3 - __rpc_get_t_size@NTIRPC_1.4.3 1.4.3 - __rpc_getconf@NTIRPC_1.4.3 1.4.3 - __rpc_getconfip@NTIRPC_1.4.3 1.4.3 - __rpc_nconf2fd@NTIRPC_1.4.3 1.4.3 - __rpc_nconf2fd_flags@NTIRPC_1.4.3 1.4.3 - __rpc_nconf2sockinfo@NTIRPC_1.4.3 1.4.3 - __rpc_rawcombuf@NTIRPC_1.4.3 1.4.3 - __rpc_seman2socktype@NTIRPC_1.4.3 1.4.3 - __rpc_setconf@NTIRPC_1.4.3 1.4.3 - __rpc_sockinfo2netid@NTIRPC_1.4.3 1.4.3 - __rpc_sockisbound@NTIRPC_1.4.3 1.4.3 - __rpc_socktype2seman@NTIRPC_1.4.3 1.4.3 - __rpc_taddr2uaddr_af@NTIRPC_1.4.3 1.4.3 - __rpc_uaddr2taddr_af@NTIRPC_1.4.3 1.4.3 - __rpcgettp@NTIRPC_1.4.3 1.4.3 - _get_next_token@NTIRPC_1.4.3 1.4.3 - _null_auth@NTIRPC_1.4.3 1.4.3 - _rpc_dtablesize@NTIRPC_1.4.3 1.4.3 - _seterr_reply@NTIRPC_1.4.3 1.4.3 - _svcauth_gss@NTIRPC_1.4.3 1.4.3 - _svcauth_none@NTIRPC_1.4.3 1.4.3 - _svcauth_short@NTIRPC_1.4.3 1.4.3 - _svcauth_unix@NTIRPC_1.4.3 1.4.3 - authgss_get_private_data@NTIRPC_1.4.3 1.4.3 - authgss_ncreate@NTIRPC_1.4.3 1.4.3 - authgss_ncreate_default@NTIRPC_1.4.3 1.4.3 - authgss_service@NTIRPC_1.4.3 1.4.3 - authnone_ncreate@NTIRPC_1.4.3 1.4.3 - authunix_ncreate@NTIRPC_1.4.3 1.4.3 - authunix_ncreate_default@NTIRPC_1.4.3 1.4.3 - bindresvport@NTIRPC_1.4.3 1.4.3 - bindresvport_sa@NTIRPC_1.4.3 1.4.3 - callrpc@NTIRPC_1.4.3 1.4.3 - clnt_broadcast@NTIRPC_1.4.3 1.4.3 - clnt_dg_ncreate@NTIRPC_1.4.3 1.4.3 - clnt_ncreate@NTIRPC_1.4.3 1.4.3 - clnt_ncreate_timed@NTIRPC_1.4.3 1.4.3 - clnt_ncreate_vers@NTIRPC_1.4.3 1.4.3 - clnt_ncreate_vers_timed@NTIRPC_1.4.3 1.4.3 - clnt_pcreateerror@NTIRPC_1.4.3 1.4.3 - clnt_perrno@NTIRPC_1.4.3 1.4.3 - clnt_perror@NTIRPC_1.4.3 1.4.3 - clnt_raw_ncreate@NTIRPC_1.4.3 1.4.3 - clnt_spcreateerror@NTIRPC_1.4.3 1.4.3 - clnt_sperrno@NTIRPC_1.4.3 1.4.3 - clnt_sperror@NTIRPC_1.4.3 1.4.3 - clnt_tp_ncreate@NTIRPC_1.4.3 1.4.3 - clnt_tp_ncreate_timed@NTIRPC_1.4.3 1.4.3 - clnt_vc_ncreate2@NTIRPC_1.4.3 1.4.3 - clnt_vc_ncreate@NTIRPC_1.4.3 1.4.3 - clnt_vc_ncreate_svc@NTIRPC_1.4.3 1.4.3 - clntraw_ncreate@NTIRPC_1.4.3 1.4.3 - clnttcp_ncreate@NTIRPC_1.4.3 1.4.3 - clntudp_nbufcreate@NTIRPC_1.4.3 1.4.3 - clntudp_ncreate@NTIRPC_1.4.3 1.4.3 - clntunix_ncreate@NTIRPC_1.4.3 1.4.3 - endnetconfig@NTIRPC_1.4.3 1.4.3 - endnetpath@NTIRPC_1.4.3 1.4.3 - endrpcent@NTIRPC_1.4.3 1.4.3 - free_rpc_msg@NTIRPC_1.4.3 1.4.3 - freenetconfigent@NTIRPC_1.4.3 1.4.3 - get_myaddress@NTIRPC_1.4.3 1.4.3 - getnetconfig@NTIRPC_1.4.3 1.4.3 - getnetconfigent@NTIRPC_1.4.3 1.4.3 - getnetpath@NTIRPC_1.4.3 1.4.3 - getrpcent@NTIRPC_1.4.3 1.4.3 - getrpcport@NTIRPC_1.4.3 1.4.3 - nc_perror@NTIRPC_1.4.3 1.4.3 - nc_sperror@NTIRPC_1.4.3 1.4.3 - opr_rbtree_first@NTIRPC_1.4.3 1.4.3 - opr_rbtree_init@NTIRPC_1.4.3 1.4.3 - opr_rbtree_insert@NTIRPC_1.4.3 1.4.3 - opr_rbtree_insert_at@NTIRPC_1.4.3 1.4.3 - opr_rbtree_last@NTIRPC_1.4.3 1.4.3 - opr_rbtree_lookup@NTIRPC_1.4.3 1.4.3 - opr_rbtree_next@NTIRPC_1.4.3 1.4.3 - opr_rbtree_prev@NTIRPC_1.4.3 1.4.3 - opr_rbtree_remove@NTIRPC_1.4.3 1.4.3 - opr_rbtree_replace@NTIRPC_1.4.3 1.4.3 - pmap_getmaps@NTIRPC_1.4.3 1.4.3 - pmap_getport@NTIRPC_1.4.3 1.4.3 - pmap_rmtcall@NTIRPC_1.4.3 1.4.3 - pmap_set@NTIRPC_1.4.3 1.4.3 - pmap_unset@NTIRPC_1.4.3 1.4.3 - rbtx_init@NTIRPC_1.4.3 1.4.3 - registerrpc@NTIRPC_1.4.3 1.4.3 - rpc_broadcast@NTIRPC_1.4.3 1.4.3 - rpc_broadcast_exp@NTIRPC_1.4.3 1.4.3 - rpc_call@NTIRPC_1.4.3 1.4.3 - rpc_control@NTIRPC_1.4.3 1.4.3 - rpc_createerr@NTIRPC_1.4.3 1.4.3 - rpc_nullproc@NTIRPC_1.4.3 1.4.3 - rpc_reg@NTIRPC_1.4.3 1.4.3 - rpcb_find_mapped_addr@NTIRPC_1.4.3 1.4.3 - rpcb_getaddr@NTIRPC_1.4.3 1.4.3 - rpcb_getmaps@NTIRPC_1.4.3 1.4.3 - rpcb_rmtcall@NTIRPC_1.4.3 1.4.3 - rpcb_set@NTIRPC_1.4.3 1.4.3 - rpcb_taddr2uaddr@NTIRPC_1.4.3 1.4.3 - rpcb_uaddr2taddr@NTIRPC_1.4.3 1.4.3 - rpcb_unset@NTIRPC_1.4.3 1.4.3 - setnetconfig@NTIRPC_1.4.3 1.4.3 - setnetpath@NTIRPC_1.4.3 1.4.3 - setrpcent@NTIRPC_1.4.3 1.4.3 - svc_auth_authenticate@NTIRPC_1.4.3 1.4.3 - svc_auth_reg@NTIRPC_1.4.3 1.4.3 - svc_dg_ncreate@NTIRPC_1.4.3 1.4.3 - svc_exit@NTIRPC_1.4.3 1.4.3 - svc_fd_ncreate2@NTIRPC_1.4.3 1.4.3 - svc_fd_ncreate@NTIRPC_1.4.3 1.4.3 - svc_init@NTIRPC_1.4.3 1.4.3 - svc_ncreate@NTIRPC_1.4.3 1.4.3 - svc_raw_ncreate@NTIRPC_1.4.3 1.4.3 - svc_reg@NTIRPC_1.4.3 1.4.3 - svc_register@NTIRPC_1.4.3 1.4.3 - svc_rqst_evchan_reg@NTIRPC_1.4.3 1.4.3 - svc_rqst_new_evchan@NTIRPC_1.4.3 1.4.3 - svc_rqst_rearm_events@NTIRPC_1.4.3 1.4.3 - svc_rqst_thrd_run@NTIRPC_1.4.3 1.4.3 - svc_rqst_thrd_signal@NTIRPC_1.4.3 1.4.3 - svc_run@NTIRPC_1.4.3 1.4.3 - svc_run_epoll@NTIRPC_1.4.3 1.4.3 - svc_sendreply@NTIRPC_1.4.3 1.4.3 - svc_shutdown@NTIRPC_1.4.3 1.4.3 - svc_tli_ncreate@NTIRPC_1.4.3 1.4.3 - svc_tp_ncreate@NTIRPC_1.4.3 1.4.3 - svc_unreg@NTIRPC_1.4.3 1.4.3 - svc_unregister@NTIRPC_1.4.3 1.4.3 - svc_validate_xprt_list@NTIRPC_1.4.3 1.4.3 - svc_vc_ncreate2@NTIRPC_1.4.3 1.4.3 - svc_vc_ncreate@NTIRPC_1.4.3 1.4.3 - svc_xprt_trace@NTIRPC_1.4.3 1.4.3 - svcauth_gss_acquire_cred@NTIRPC_1.4.3 1.4.3 - svcauth_gss_destroy@NTIRPC_1.4.3 1.4.3 - svcauth_gss_get_principal@NTIRPC_1.4.3 1.4.3 - svcauth_gss_import_name@NTIRPC_1.4.3 1.4.3 - svcauth_gss_nextverf@NTIRPC_1.4.3 1.4.3 - svcauth_gss_release_cred@NTIRPC_1.4.3 1.4.3 - svcauth_gss_set_svc_name@NTIRPC_1.4.3 1.4.3 - svcerr_auth@NTIRPC_1.4.3 1.4.3 - svcerr_decode@NTIRPC_1.4.3 1.4.3 - svcerr_noproc@NTIRPC_1.4.3 1.4.3 - svcerr_noprog@NTIRPC_1.4.3 1.4.3 - svcerr_progvers@NTIRPC_1.4.3 1.4.3 - svcerr_systemerr@NTIRPC_1.4.3 1.4.3 - svcerr_weakauth@NTIRPC_1.4.3 1.4.3 - svcraw_ncreate@NTIRPC_1.4.3 1.4.3 - svctcp_ncreate@NTIRPC_1.4.3 1.4.3 - svcudp_nbufcreate@NTIRPC_1.4.3 1.4.3 - svcudp_ncreate@NTIRPC_1.4.3 1.4.3 - svcunix_ncreate@NTIRPC_1.4.3 1.4.3 - svcunixfd_ncreate@NTIRPC_1.4.3 1.4.3 - taddr2uaddr@NTIRPC_1.4.3 1.4.3 - tirpc_control@NTIRPC_1.4.3 1.4.3 - uaddr2taddr@NTIRPC_1.4.3 1.4.3 - xdr_array@NTIRPC_1.4.3 1.4.3 - xdr_authunix_parms@NTIRPC_1.4.3 1.4.3 - xdr_bool@NTIRPC_1.4.3 1.4.3 - xdr_bytes@NTIRPC_1.4.3 1.4.3 - xdr_call_decode@NTIRPC_1.4.3 1.4.3 - xdr_call_encode@NTIRPC_1.4.3 1.4.3 - xdr_char@NTIRPC_1.4.3 1.4.3 - xdr_double@NTIRPC_1.4.3 1.4.3 - xdr_dplx_decode@NTIRPC_1.4.3 1.4.3 - xdr_dplx_msg@NTIRPC_1.4.3 1.4.3 - xdr_enum@NTIRPC_1.4.3 1.4.3 - xdr_float@NTIRPC_1.4.3 1.4.3 - xdr_free_null_stream@NTIRPC_1.4.3 1.4.3 - xdr_hyper@NTIRPC_1.4.3 1.4.3 - xdr_inrec_cksum@NTIRPC_1.4.3 1.4.3 - xdr_inrec_create@NTIRPC_1.4.3 1.4.3 - xdr_inrec_eof@NTIRPC_1.4.3 1.4.3 - xdr_inrec_readahead@NTIRPC_1.4.3 1.4.3 - xdr_inrec_skiprecord@NTIRPC_1.4.3 1.4.3 - xdr_int16_t@NTIRPC_1.4.3 1.4.3 - xdr_int32_t@NTIRPC_1.4.3 1.4.3 - xdr_int64_t@NTIRPC_1.4.3 1.4.3 - xdr_int@NTIRPC_1.4.3 1.4.3 - xdr_long@NTIRPC_1.4.3 1.4.3 - xdr_longlong_t@NTIRPC_1.4.3 1.4.3 - xdr_naccepted_reply@NTIRPC_1.4.3 1.4.3 - xdr_ncallhdr@NTIRPC_1.4.3 1.4.3 - xdr_ncallmsg@NTIRPC_1.4.3 1.4.3 - xdr_netbuf@NTIRPC_1.4.3 1.4.3 - xdr_nnetobj@NTIRPC_1.4.3 1.4.3 - xdr_nrejected_reply@NTIRPC_1.4.3 1.4.3 - xdr_nreplymsg@NTIRPC_1.4.3 1.4.3 - xdr_opaque@NTIRPC_1.4.3 1.4.3 - xdr_opaque_auth@NTIRPC_1.4.3 1.4.3 - xdr_pmap@NTIRPC_1.4.3 1.4.3 - xdr_pmaplist@NTIRPC_1.4.3 1.4.3 - xdr_pmaplist_ptr@NTIRPC_1.4.3 1.4.3 - xdr_pointer@NTIRPC_1.4.3 1.4.3 - xdr_reference@NTIRPC_1.4.3 1.4.3 - xdr_rmtcall_args@NTIRPC_1.4.3 1.4.3 - xdr_rmtcallres@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_buf@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_cred@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_data@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_init_args@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_init_res@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_unwrap_data@NTIRPC_1.4.3 1.4.3 - xdr_rpc_gss_wrap_data@NTIRPC_1.4.3 1.4.3 - xdr_rpcb@NTIRPC_1.4.3 1.4.3 - xdr_rpcb_entry@NTIRPC_1.4.3 1.4.3 - xdr_rpcb_entry_list_ptr@NTIRPC_1.4.3 1.4.3 - xdr_rpcb_rmtcallargs@NTIRPC_1.4.3 1.4.3 - xdr_rpcb_rmtcallres@NTIRPC_1.4.3 1.4.3 - xdr_rpcb_stat@NTIRPC_1.4.3 1.4.3 - xdr_rpcb_stat_byvers@NTIRPC_1.4.3 1.4.3 - xdr_rpcblist@NTIRPC_1.4.3 1.4.3 - xdr_rpcblist_ptr@NTIRPC_1.4.3 1.4.3 - xdr_rpcbs_addrlist@NTIRPC_1.4.3 1.4.3 - xdr_rpcbs_addrlist_ptr@NTIRPC_1.4.3 1.4.3 - xdr_rpcbs_proc@NTIRPC_1.4.3 1.4.3 - xdr_rpcbs_rmtcalllist@NTIRPC_1.4.3 1.4.3 - xdr_rpcbs_rmtcalllist_ptr@NTIRPC_1.4.3 1.4.3 - xdr_short@NTIRPC_1.4.3 1.4.3 - xdr_string@NTIRPC_1.4.3 1.4.3 - xdr_u_char@NTIRPC_1.4.3 1.4.3 - xdr_u_hyper@NTIRPC_1.4.3 1.4.3 - xdr_u_int16_t@NTIRPC_1.4.3 1.4.3 - xdr_u_int32_t@NTIRPC_1.4.3 1.4.3 - xdr_u_int64_t@NTIRPC_1.4.3 1.4.3 - xdr_u_int@NTIRPC_1.4.3 1.4.3 - xdr_u_long@NTIRPC_1.4.3 1.4.3 - xdr_u_longlong_t@NTIRPC_1.4.3 1.4.3 - xdr_u_short@NTIRPC_1.4.3 1.4.3 - xdr_uint32_t@NTIRPC_1.4.3 1.4.3 - xdr_uint64_t@NTIRPC_1.4.3 1.4.3 - xdr_union@NTIRPC_1.4.3 1.4.3 - xdr_vector@NTIRPC_1.4.3 1.4.3 - xdr_void@NTIRPC_1.4.3 1.4.3 - xdr_wrapstring@NTIRPC_1.4.3 1.4.3 - xdrmem_ncreate@NTIRPC_1.4.3 1.4.3 - xdrrec_create@NTIRPC_1.4.3 1.4.3 - xdrrec_endofrecord@NTIRPC_1.4.3 1.4.3 - xdrrec_eof@NTIRPC_1.4.3 1.4.3 - xdrrec_skiprecord@NTIRPC_1.4.3 1.4.3 - xdrstdio_create@NTIRPC_1.4.3 1.4.3 - xprt_register@NTIRPC_1.4.3 1.4.3 - xprt_unregister@NTIRPC_1.4.3 1.4.3 + __ntirpc_pkg_params@NTIRPC_1.4.4 1.4.4 + __rpc_createerr@NTIRPC_1.4.4 1.4.4 + __rpc_dtbsize@NTIRPC_1.4.4 1.4.4 + __rpc_endconf@NTIRPC_1.4.4 1.4.4 + __rpc_fd2sockinfo@NTIRPC_1.4.4 1.4.4 + __rpc_fixup_addr@NTIRPC_1.4.4 1.4.4 + __rpc_get_a_size@NTIRPC_1.4.4 1.4.4 + __rpc_get_local_uid@NTIRPC_1.4.4 1.4.4 + __rpc_get_t_size@NTIRPC_1.4.4 1.4.4 + __rpc_getconf@NTIRPC_1.4.4 1.4.4 + __rpc_getconfip@NTIRPC_1.4.4 1.4.4 + __rpc_nconf2fd@NTIRPC_1.4.4 1.4.4 + __rpc_nconf2fd_flags@NTIRPC_1.4.4 1.4.4 + __rpc_nconf2sockinfo@NTIRPC_1.4.4 1.4.4 + __rpc_rawcombuf@NTIRPC_1.4.4 1.4.4 + __rpc_seman2socktype@NTIRPC_1.4.4 1.4.4 + __rpc_setconf@NTIRPC_1.4.4 1.4.4 + __rpc_sockinfo2netid@NTIRPC_1.4.4 1.4.4 + __rpc_sockisbound@NTIRPC_1.4.4 1.4.4 + __rpc_socktype2seman@NTIRPC_1.4.4 1.4.4 + __rpc_taddr2uaddr_af@NTIRPC_1.4.4 1.4.4 + __rpc_uaddr2taddr_af@NTIRPC_1.4.4 1.4.4 + __rpcgettp@NTIRPC_1.4.4 1.4.4 + _get_next_token@NTIRPC_1.4.4 1.4.4 + _null_auth@NTIRPC_1.4.4 1.4.4 + _rpc_dtablesize@NTIRPC_1.4.4 1.4.4 + _seterr_reply@NTIRPC_1.4.4 1.4.4 + _svcauth_gss@NTIRPC_1.4.4 1.4.4 + _svcauth_none@NTIRPC_1.4.4 1.4.4 + _svcauth_short@NTIRPC_1.4.4 1.4.4 + _svcauth_unix@NTIRPC_1.4.4 1.4.4 + authgss_get_private_data@NTIRPC_1.4.4 1.4.4 + authgss_ncreate@NTIRPC_1.4.4 1.4.4 + authgss_ncreate_default@NTIRPC_1.4.4 1.4.4 + authgss_service@NTIRPC_1.4.4 1.4.4 + authnone_ncreate@NTIRPC_1.4.4 1.4.4 + authunix_ncreate@NTIRPC_1.4.4 1.4.4 + authunix_ncreate_default@NTIRPC_1.4.4 1.4.4 + bindresvport@NTIRPC_1.4.4 1.4.4 + bindresvport_sa@NTIRPC_1.4.4 1.4.4 + callrpc@NTIRPC_1.4.4 1.4.4 + clnt_broadcast@NTIRPC_1.4.4 1.4.4 + clnt_dg_ncreate@NTIRPC_1.4.4 1.4.4 + clnt_ncreate@NTIRPC_1.4.4 1.4.4 + clnt_ncreate_timed@NTIRPC_1.4.4 1.4.4 + clnt_ncreate_vers@NTIRPC_1.4.4 1.4.4 + clnt_ncreate_vers_timed@NTIRPC_1.4.4 1.4.4 + clnt_pcreateerror@NTIRPC_1.4.4 1.4.4 + clnt_perrno@NTIRPC_1.4.4 1.4.4 + clnt_perror@NTIRPC_1.4.4 1.4.4 + clnt_raw_ncreate@NTIRPC_1.4.4 1.4.4 + clnt_spcreateerror@NTIRPC_1.4.4 1.4.4 + clnt_sperrno@NTIRPC_1.4.4 1.4.4 + clnt_sperror@NTIRPC_1.4.4 1.4.4 + clnt_tp_ncreate@NTIRPC_1.4.4 1.4.4 + clnt_tp_ncreate_timed@NTIRPC_1.4.4 1.4.4 + clnt_vc_ncreate2@NTIRPC_1.4.4 1.4.4 + clnt_vc_ncreate@NTIRPC_1.4.4 1.4.4 + clnt_vc_ncreate_svc@NTIRPC_1.4.4 1.4.4 + clntraw_ncreate@NTIRPC_1.4.4 1.4.4 + clnttcp_ncreate@NTIRPC_1.4.4 1.4.4 + clntudp_nbufcreate@NTIRPC_1.4.4 1.4.4 + clntudp_ncreate@NTIRPC_1.4.4 1.4.4 + clntunix_ncreate@NTIRPC_1.4.4 1.4.4 + endnetconfig@NTIRPC_1.4.4 1.4.4 + endnetpath@NTIRPC_1.4.4 1.4.4 + endrpcent@NTIRPC_1.4.4 1.4.4 + free_rpc_msg@NTIRPC_1.4.4 1.4.4 + freenetconfigent@NTIRPC_1.4.4 1.4.4 + get_myaddress@NTIRPC_1.4.4 1.4.4 + getnetconfig@NTIRPC_1.4.4 1.4.4 + getnetconfigent@NTIRPC_1.4.4 1.4.4 + getnetpath@NTIRPC_1.4.4 1.4.4 + getrpcent@NTIRPC_1.4.4 1.4.4 + getrpcport@NTIRPC_1.4.4 1.4.4 + nc_perror@NTIRPC_1.4.4 1.4.4 + nc_sperror@NTIRPC_1.4.4 1.4.4 + opr_rbtree_first@NTIRPC_1.4.4 1.4.4 + opr_rbtree_init@NTIRPC_1.4.4 1.4.4 + opr_rbtree_insert@NTIRPC_1.4.4 1.4.4 + opr_rbtree_insert_at@NTIRPC_1.4.4 1.4.4 + opr_rbtree_last@NTIRPC_1.4.4 1.4.4 + opr_rbtree_lookup@NTIRPC_1.4.4 1.4.4 + opr_rbtree_next@NTIRPC_1.4.4 1.4.4 + opr_rbtree_prev@NTIRPC_1.4.4 1.4.4 + opr_rbtree_remove@NTIRPC_1.4.4 1.4.4 + opr_rbtree_replace@NTIRPC_1.4.4 1.4.4 + pmap_getmaps@NTIRPC_1.4.4 1.4.4 + pmap_getport@NTIRPC_1.4.4 1.4.4 + pmap_rmtcall@NTIRPC_1.4.4 1.4.4 + pmap_set@NTIRPC_1.4.4 1.4.4 + pmap_unset@NTIRPC_1.4.4 1.4.4 + rbtx_init@NTIRPC_1.4.4 1.4.4 + registerrpc@NTIRPC_1.4.4 1.4.4 + rpc_broadcast@NTIRPC_1.4.4 1.4.4 + rpc_broadcast_exp@NTIRPC_1.4.4 1.4.4 + rpc_call@NTIRPC_1.4.4 1.4.4 + rpc_control@NTIRPC_1.4.4 1.4.4 + rpc_createerr@NTIRPC_1.4.4 1.4.4 + rpc_nullproc@NTIRPC_1.4.4 1.4.4 + rpc_reg@NTIRPC_1.4.4 1.4.4 + rpcb_find_mapped_addr@NTIRPC_1.4.4 1.4.4 + rpcb_getaddr@NTIRPC_1.4.4 1.4.4 + rpcb_getmaps@NTIRPC_1.4.4 1.4.4 + rpcb_rmtcall@NTIRPC_1.4.4 1.4.4 + rpcb_set@NTIRPC_1.4.4 1.4.4 + rpcb_taddr2uaddr@NTIRPC_1.4.4 1.4.4 + rpcb_uaddr2taddr@NTIRPC_1.4.4 1.4.4 + rpcb_unset@NTIRPC_1.4.4 1.4.4 + setnetconfig@NTIRPC_1.4.4 1.4.4 + setnetpath@NTIRPC_1.4.4 1.4.4 + setrpcent@NTIRPC_1.4.4 1.4.4 + svc_auth_authenticate@NTIRPC_1.4.4 1.4.4 + svc_auth_reg@NTIRPC_1.4.4 1.4.4 + svc_dg_ncreate@NTIRPC_1.4.4 1.4.4 + svc_exit@NTIRPC_1.4.4 1.4.4 + svc_fd_ncreate2@NTIRPC_1.4.4 1.4.4 + svc_fd_ncreate@NTIRPC_1.4.4 1.4.4 + svc_init@NTIRPC_1.4.4 1.4.4 + svc_ncreate@NTIRPC_1.4.4 1.4.4 + svc_raw_ncreate@NTIRPC_1.4.4 1.4.4 + svc_reg@NTIRPC_1.4.4 1.4.4 + svc_register@NTIRPC_1.4.4 1.4.4 + svc_rqst_evchan_reg@NTIRPC_1.4.4 1.4.4 + svc_rqst_new_evchan@NTIRPC_1.4.4 1.4.4 + svc_rqst_rearm_events@NTIRPC_1.4.4 1.4.4 + svc_rqst_thrd_run@NTIRPC_1.4.4 1.4.4 + svc_rqst_thrd_signal@NTIRPC_1.4.4 1.4.4 + svc_run@NTIRPC_1.4.4 1.4.4 + svc_run_epoll@NTIRPC_1.4.4 1.4.4 + svc_sendreply@NTIRPC_1.4.4 1.4.4 + svc_shutdown@NTIRPC_1.4.4 1.4.4 + svc_tli_ncreate@NTIRPC_1.4.4 1.4.4 + svc_tp_ncreate@NTIRPC_1.4.4 1.4.4 + svc_unreg@NTIRPC_1.4.4 1.4.4 + svc_unregister@NTIRPC_1.4.4 1.4.4 + svc_validate_xprt_list@NTIRPC_1.4.4 1.4.4 + svc_vc_ncreate2@NTIRPC_1.4.4 1.4.4 + svc_vc_ncreate@NTIRPC_1.4.4 1.4.4 + svc_xprt_trace@NTIRPC_1.4.4 1.4.4 + svcauth_gss_acquire_cred@NTIRPC_1.4.4 1.4.4 + svcauth_gss_destroy@NTIRPC_1.4.4 1.4.4 + svcauth_gss_get_principal@NTIRPC_1.4.4 1.4.4 + svcauth_gss_import_name@NTIRPC_1.4.4 1.4.4 + svcauth_gss_nextverf@NTIRPC_1.4.4 1.4.4 + svcauth_gss_release_cred@NTIRPC_1.4.4 1.4.4 + svcauth_gss_set_svc_name@NTIRPC_1.4.4 1.4.4 + svcerr_auth@NTIRPC_1.4.4 1.4.4 + svcerr_decode@NTIRPC_1.4.4 1.4.4 + svcerr_noproc@NTIRPC_1.4.4 1.4.4 + svcerr_noprog@NTIRPC_1.4.4 1.4.4 + svcerr_progvers@NTIRPC_1.4.4 1.4.4 + svcerr_systemerr@NTIRPC_1.4.4 1.4.4 + svcerr_weakauth@NTIRPC_1.4.4 1.4.4 + svcraw_ncreate@NTIRPC_1.4.4 1.4.4 + svctcp_ncreate@NTIRPC_1.4.4 1.4.4 + svcudp_nbufcreate@NTIRPC_1.4.4 1.4.4 + svcudp_ncreate@NTIRPC_1.4.4 1.4.4 + svcunix_ncreate@NTIRPC_1.4.4 1.4.4 + svcunixfd_ncreate@NTIRPC_1.4.4 1.4.4 + taddr2uaddr@NTIRPC_1.4.4 1.4.4 + tirpc_control@NTIRPC_1.4.4 1.4.4 + uaddr2taddr@NTIRPC_1.4.4 1.4.4 + xdr_array@NTIRPC_1.4.4 1.4.4 + xdr_authunix_parms@NTIRPC_1.4.4 1.4.4 + xdr_bool@NTIRPC_1.4.4 1.4.4 + xdr_bytes@NTIRPC_1.4.4 1.4.4 + xdr_call_decode@NTIRPC_1.4.4 1.4.4 + xdr_call_encode@NTIRPC_1.4.4 1.4.4 + xdr_char@NTIRPC_1.4.4 1.4.4 + xdr_double@NTIRPC_1.4.4 1.4.4 + xdr_dplx_decode@NTIRPC_1.4.4 1.4.4 + xdr_dplx_msg@NTIRPC_1.4.4 1.4.4 + xdr_enum@NTIRPC_1.4.4 1.4.4 + xdr_float@NTIRPC_1.4.4 1.4.4 + xdr_free_null_stream@NTIRPC_1.4.4 1.4.4 + xdr_hyper@NTIRPC_1.4.4 1.4.4 + xdr_inrec_cksum@NTIRPC_1.4.4 1.4.4 + xdr_inrec_create@NTIRPC_1.4.4 1.4.4 + xdr_inrec_eof@NTIRPC_1.4.4 1.4.4 + xdr_inrec_readahead@NTIRPC_1.4.4 1.4.4 + xdr_inrec_skiprecord@NTIRPC_1.4.4 1.4.4 + xdr_int16_t@NTIRPC_1.4.4 1.4.4 + xdr_int32_t@NTIRPC_1.4.4 1.4.4 + xdr_int64_t@NTIRPC_1.4.4 1.4.4 + xdr_int@NTIRPC_1.4.4 1.4.4 + xdr_long@NTIRPC_1.4.4 1.4.4 + xdr_longlong_t@NTIRPC_1.4.4 1.4.4 + xdr_naccepted_reply@NTIRPC_1.4.4 1.4.4 + xdr_ncallhdr@NTIRPC_1.4.4 1.4.4 + xdr_ncallmsg@NTIRPC_1.4.4 1.4.4 + xdr_netbuf@NTIRPC_1.4.4 1.4.4 + xdr_nnetobj@NTIRPC_1.4.4 1.4.4 + xdr_nrejected_reply@NTIRPC_1.4.4 1.4.4 + xdr_nreplymsg@NTIRPC_1.4.4 1.4.4 + xdr_opaque@NTIRPC_1.4.4 1.4.4 + xdr_opaque_auth@NTIRPC_1.4.4 1.4.4 + xdr_pmap@NTIRPC_1.4.4 1.4.4 + xdr_pmaplist@NTIRPC_1.4.4 1.4.4 + xdr_pmaplist_ptr@NTIRPC_1.4.4 1.4.4 + xdr_pointer@NTIRPC_1.4.4 1.4.4 + xdr_reference@NTIRPC_1.4.4 1.4.4 + xdr_rmtcall_args@NTIRPC_1.4.4 1.4.4 + xdr_rmtcallres@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_buf@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_cred@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_data@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_init_args@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_init_res@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_unwrap_data@NTIRPC_1.4.4 1.4.4 + xdr_rpc_gss_wrap_data@NTIRPC_1.4.4 1.4.4 + xdr_rpcb@NTIRPC_1.4.4 1.4.4 + xdr_rpcb_entry@NTIRPC_1.4.4 1.4.4 + xdr_rpcb_entry_list_ptr@NTIRPC_1.4.4 1.4.4 + xdr_rpcb_rmtcallargs@NTIRPC_1.4.4 1.4.4 + xdr_rpcb_rmtcallres@NTIRPC_1.4.4 1.4.4 + xdr_rpcb_stat@NTIRPC_1.4.4 1.4.4 + xdr_rpcb_stat_byvers@NTIRPC_1.4.4 1.4.4 + xdr_rpcblist@NTIRPC_1.4.4 1.4.4 + xdr_rpcblist_ptr@NTIRPC_1.4.4 1.4.4 + xdr_rpcbs_addrlist@NTIRPC_1.4.4 1.4.4 + xdr_rpcbs_addrlist_ptr@NTIRPC_1.4.4 1.4.4 + xdr_rpcbs_proc@NTIRPC_1.4.4 1.4.4 + xdr_rpcbs_rmtcalllist@NTIRPC_1.4.4 1.4.4 + xdr_rpcbs_rmtcalllist_ptr@NTIRPC_1.4.4 1.4.4 + xdr_short@NTIRPC_1.4.4 1.4.4 + xdr_string@NTIRPC_1.4.4 1.4.4 + xdr_u_char@NTIRPC_1.4.4 1.4.4 + xdr_u_hyper@NTIRPC_1.4.4 1.4.4 + xdr_u_int16_t@NTIRPC_1.4.4 1.4.4 + xdr_u_int32_t@NTIRPC_1.4.4 1.4.4 + xdr_u_int64_t@NTIRPC_1.4.4 1.4.4 + xdr_u_int@NTIRPC_1.4.4 1.4.4 + xdr_u_long@NTIRPC_1.4.4 1.4.4 + xdr_u_longlong_t@NTIRPC_1.4.4 1.4.4 + xdr_u_short@NTIRPC_1.4.4 1.4.4 + xdr_uint32_t@NTIRPC_1.4.4 1.4.4 + xdr_uint64_t@NTIRPC_1.4.4 1.4.4 + xdr_union@NTIRPC_1.4.4 1.4.4 + xdr_vector@NTIRPC_1.4.4 1.4.4 + xdr_void@NTIRPC_1.4.4 1.4.4 + xdr_wrapstring@NTIRPC_1.4.4 1.4.4 + xdrmem_ncreate@NTIRPC_1.4.4 1.4.4 + xdrrec_create@NTIRPC_1.4.4 1.4.4 + xdrrec_endofrecord@NTIRPC_1.4.4 1.4.4 + xdrrec_eof@NTIRPC_1.4.4 1.4.4 + xdrrec_skiprecord@NTIRPC_1.4.4 1.4.4 + xdrstdio_create@NTIRPC_1.4.4 1.4.4 + xprt_register@NTIRPC_1.4.4 1.4.4 + xprt_unregister@NTIRPC_1.4.4 1.4.4 diff -Nru ntirpc-1.4.3/ntirpc/rpc/xdr_inline.h ntirpc-1.4.4/ntirpc/rpc/xdr_inline.h --- ntirpc-1.4.3/ntirpc/rpc/xdr_inline.h 2016-10-25 20:15:56.000000000 +0200 +++ ntirpc-1.4.4/ntirpc/rpc/xdr_inline.h 2017-05-05 21:07:02.000000000 +0200 @@ -56,7 +56,7 @@ */ #define XDR_FALSE ((long) 0) #define XDR_TRUE ((long) 1) -#define LASTUNSIGNED ((u_int) 0-1) +#define RPC_MAXDATASIZE 9000 /* * Free a data structure using XDR @@ -544,6 +544,7 @@ { char *sp = *cpp; /* sp is the actual string pointer */ u_int nodesize; + bool ret; /* * first deal with the length since xdr bytes are counted @@ -564,7 +565,12 @@ return (true); if (sp == NULL) *cpp = sp = (char *)mem_alloc(nodesize); - return (inline_xdr_getopaque(xdrs, sp, nodesize)); + ret = inline_xdr_getopaque(xdrs, sp, nodesize); + if (! ret) { + free(sp); + *cpp = NULL; + } + return (ret); case XDR_ENCODE: return (inline_xdr_putopaque(xdrs, sp, nodesize)); @@ -653,6 +659,7 @@ char *sp = *cpp; /* sp is the actual string pointer */ u_int size = 0; /* XXX remove warning */ u_int nodesize; + bool ret; /* * first deal with the length since xdr strings are counted-strings @@ -691,8 +698,13 @@ case XDR_DECODE: if (sp == NULL) *cpp = sp = (char *)mem_alloc(nodesize); - sp[size] = 0; - return (inline_xdr_getopaque(xdrs, sp, size)); + ret = inline_xdr_getopaque(xdrs, sp, size); + if (! ret) { + free(sp); + *cpp = NULL; + } else + sp[size] = 0; + return (ret); case XDR_ENCODE: return (inline_xdr_putopaque(xdrs, sp, size)); @@ -713,7 +725,7 @@ static inline bool inline_xdr_wrapstring(XDR *xdrs, char **cpp) { - return inline_xdr_string(xdrs, cpp, LASTUNSIGNED); + return inline_xdr_string(xdrs, cpp, RPC_MAXDATASIZE); } /* diff -Nru ntirpc-1.4.3/src/rpcb_st_xdr.c ntirpc-1.4.4/src/rpcb_st_xdr.c --- ntirpc-1.4.3/src/rpcb_st_xdr.c 2016-10-25 20:15:56.000000000 +0200 +++ ntirpc-1.4.4/src/rpcb_st_xdr.c 2017-05-05 21:07:02.000000000 +0200 @@ -39,6 +39,8 @@ #include <sys/cdefs.h> #include <rpc/rpc.h> +#include <rpc/xdr.h> +#include <rpc/xdr_inline.h> /* Link list of all the stats about getport and getaddr */ @@ -53,7 +55,7 @@ return (false); if (!xdr_int(xdrs, &objp->failure)) return (false); - if (!xdr_string(xdrs, &objp->netid, (u_int) ~0)) + if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE)) return (false); if (!xdr_pointer (xdrs, (char **)&objp->next, sizeof(rpcbs_addrlist), @@ -93,7 +95,7 @@ IXDR_PUT_INT32(buf, objp->failure); IXDR_PUT_INT32(buf, objp->indirect); } - if (!xdr_string(xdrs, &objp->netid, (u_int) ~0)) + if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE)) return (false); if (!xdr_pointer (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist), @@ -123,7 +125,7 @@ objp->failure = (int)IXDR_GET_INT32(buf); objp->indirect = (int)IXDR_GET_INT32(buf); } - if (!xdr_string(xdrs, &objp->netid, (u_int) ~0)) + if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE)) return (false); if (!xdr_pointer (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist), @@ -143,7 +145,7 @@ return (false); if (!xdr_int(xdrs, &objp->indirect)) return (false); - if (!xdr_string(xdrs, &objp->netid, (u_int) ~0)) + if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE)) return (false); if (!xdr_pointer (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist), diff -Nru ntirpc-1.4.3/src/rpc_generic.c ntirpc-1.4.4/src/rpc_generic.c --- ntirpc-1.4.3/src/rpc_generic.c 2016-10-25 20:15:56.000000000 +0200 +++ ntirpc-1.4.4/src/rpc_generic.c 2017-05-05 21:07:02.000000000 +0200 @@ -747,6 +747,8 @@ switch (af) { case AF_INET: + if (nbuf->len < sizeof(*sin)) + return NULL; sin = nbuf->buf; if (inet_ntop(af, &sin->sin_addr, namebuf, sizeof(namebuf)) == NULL) @@ -761,6 +763,8 @@ break; #ifdef INET6 case AF_INET6: + if (nbuf->len < sizeof(*sin6)) + return NULL; sin6 = nbuf->buf; if (inet_ntop(af, &sin6->sin6_addr, namebuf6, sizeof(namebuf6)) == NULL) { @@ -827,6 +831,8 @@ port = 0; sin = NULL; + if (uaddr == NULL) + return NULL; addrstr = mem_strdup(uaddr); /* diff -Nru ntirpc-1.4.3/src/xdr.c ntirpc-1.4.4/src/xdr.c --- ntirpc-1.4.3/src/xdr.c 2016-10-25 20:15:56.000000000 +0200 +++ ntirpc-1.4.4/src/xdr.c 2017-05-05 21:07:02.000000000 +0200 @@ -56,7 +56,7 @@ */ #define XDR_FALSE ((long) 0) #define XDR_TRUE ((long) 1) -#define LASTUNSIGNED ((u_int) 0-1) +#define RPC_MAXDATASIZE 9000 /* * for unit alignment @@ -504,6 +504,7 @@ { char *sp = *cpp; /* sp is the actual string pointer */ u_int nodesize; + bool ret, allocated = false; /* * first deal with the length since xdr bytes are counted @@ -523,12 +524,21 @@ case XDR_DECODE: if (nodesize == 0) return (true); - if (sp == NULL) + if (sp == NULL) { *cpp = sp = mem_alloc(nodesize); + allocated = true; + } /* FALLTHROUGH */ case XDR_ENCODE: - return (xdr_opaque(xdrs, sp, nodesize)); + ret = xdr_opaque(xdrs, sp, nodesize); + if ((xdrs->x_op == XDR_DECODE) && (ret == false)) { + if (allocated) { + free(sp); + *cpp = NULL; + } + } + return (ret); case XDR_FREE: if (sp != NULL) { @@ -611,6 +621,7 @@ char *sp = *cpp; /* sp is the actual string pointer */ u_int size = 0; u_int nodesize; + bool ret, allocated = false; /* * first deal with the length since xdr strings are counted-strings @@ -647,13 +658,22 @@ switch (xdrs->x_op) { case XDR_DECODE: - if (sp == NULL) + if (sp == NULL) { *cpp = sp = mem_alloc(nodesize); + allocated = true; + } sp[size] = 0; /* FALLTHROUGH */ case XDR_ENCODE: - return (xdr_opaque(xdrs, sp, size)); + ret = xdr_opaque(xdrs, sp, size); + if ((xdrs->x_op == XDR_DECODE) && (ret == false)) { + if (allocated) { + free(sp); + *cpp = NULL; + } + } + return (ret); case XDR_FREE: mem_free(sp, nodesize); @@ -671,7 +691,7 @@ bool xdr_wrapstring(XDR *xdrs, char **cpp) { - return xdr_string(xdrs, cpp, LASTUNSIGNED); + return xdr_string(xdrs, cpp, RPC_MAXDATASIZE); } /*
<<attachment: martin.vcf>>
signature.asc
Description: OpenPGP digital signature