CVS commit: [netbsd-10] src/sys/nfs

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Sat Jun 27 09:47:47 UTC 2026

Modified Files:
        src/sys/nfs [netbsd-10]: nfs.h nfs_serv.c nfs_srvsocket.c
            nfs_syscalls.c

Log Message:
Pull up following revision(s) (requested by christos in ticket #1273):

        sys/nfs/nfs_serv.c: revision 1.185
        sys/nfs/nfs_srvsocket.c: revision 1.7
        sys/nfs/nfs_syscalls.c: revision 1.165
        sys/nfs/nfs.h: revision 1.83

Prevent a DoS attack by stuffing the server with too many fragments that
can lead to resource exhaustion and memory corruption. Reported by Andrew Griffiths

Validate the rpc readdir and readdirplus cnt, siz to prevent integer overflows
that will corrupt memory. Reported by Andrew Griffiths

Fix memory leak. ns_frag holds the unprocessed fragments that needs to be freed.
Reported by Andrew Griffiths


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.80.4.1 src/sys/nfs/nfs.h
cvs rdiff -u -r1.183.4.1 -r1.183.4.2 src/sys/nfs/nfs_serv.c
cvs rdiff -u -r1.4.94.1 -r1.4.94.2 src/sys/nfs/nfs_srvsocket.c
cvs rdiff -u -r1.163 -r1.163.10.1 src/sys/nfs/nfs_syscalls.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.