Subject: PR/32572 CVS commit: src/lib/libc/rpc
To: None <lib-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Christos Zoulas <christos@netbsd.org>
List: netbsd-bugs
Date: 01/19/2006 16:45:02
The following reply was made to PR lib/32572; it has been noted by GNATS.
From: Christos Zoulas <christos@netbsd.org>
To: gnats-bugs@netbsd.org
Cc:
Subject: PR/32572 CVS commit: src/lib/libc/rpc
Date: Thu, 19 Jan 2006 16:40:44 +0000 (UTC)
Module Name: src
Committed By: christos
Date: Thu Jan 19 16:40:44 UTC 2006
Modified Files:
src/lib/libc/rpc: xdr_rec.c
Log Message:
PR/32572: John Kohl: xdr_rec.c missing a bugfix for an improper security check
The correct way to check for a zero record length is to check for it
without the LAST_FRAG marker in it, since it's legal to send a LAST_FRAG
marker with 0 bytes of data.
[This should be pulled up to 3.0]
To generate a diff of this commit:
cvs rdiff -r1.25 -r1.26 src/lib/libc/rpc/xdr_rec.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.