Subject: PR/32572 CVS commit: src/lib/libc/rpc
To: None <lib-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Christos Zoulas <christos@netbsd.org>
List: netbsd-bugs
Date: 01/19/2006 16:45:02
The following reply was made to PR lib/32572; it has been noted by GNATS.

From: Christos Zoulas <christos@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: PR/32572 CVS commit: src/lib/libc/rpc
Date: Thu, 19 Jan 2006 16:40:44 +0000 (UTC)

 Module Name:	src
 Committed By:	christos
 Date:		Thu Jan 19 16:40:44 UTC 2006
 
 Modified Files:
 	src/lib/libc/rpc: xdr_rec.c
 
 Log Message:
 PR/32572: John Kohl: xdr_rec.c missing a bugfix for an improper security check
 The correct way to check for a zero record length is to check for it
 without the LAST_FRAG marker in it, since it's legal to send a LAST_FRAG
 marker with 0 bytes of data.
 [This should be pulled up to 3.0]
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.25 -r1.26 src/lib/libc/rpc/xdr_rec.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.