aboutsummaryrefslogtreecommitdiffstats
path: root/security/krb5/files
diff options
context:
space:
mode:
authornectar <nectar@FreeBSD.org>2002-08-03 02:22:45 +0800
committernectar <nectar@FreeBSD.org>2002-08-03 02:22:45 +0800
commit88bd97121501a81e9f458755e8aa83d7ad0e52f0 (patch)
treeb5d57bb276da8b9b2736b25b8e8f47c430c6b2cf /security/krb5/files
parentee794f49bddfa8174cc8470c4bee05f6826c7b3d (diff)
downloadfreebsd-ports-gnome-88bd97121501a81e9f458755e8aa83d7ad0e52f0.tar.gz
freebsd-ports-gnome-88bd97121501a81e9f458755e8aa83d7ad0e52f0.tar.zst
freebsd-ports-gnome-88bd97121501a81e9f458755e8aa83d7ad0e52f0.zip
Correct Sun RPC buffer overflow.
<URL:http://online.securityfocus.com/archive/1/285308> <URL:http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823>
Diffstat (limited to 'security/krb5/files')
-rw-r--r--security/krb5/files/patch-lib::rpc::xdr_array.c20
1 files changed, 20 insertions, 0 deletions
diff --git a/security/krb5/files/patch-lib::rpc::xdr_array.c b/security/krb5/files/patch-lib::rpc::xdr_array.c
new file mode 100644
index 000000000000..be9be37eada6
--- /dev/null
+++ b/security/krb5/files/patch-lib::rpc::xdr_array.c
@@ -0,0 +1,20 @@
+--- lib/rpc/xdr_array.c.orig Fri Feb 13 20:27:23 1998
++++ lib/rpc/xdr_array.c Fri Aug 2 13:03:55 2002
+@@ -40,6 +40,7 @@
+ * arrays. See xdr.h for more info on the interface to xdr.
+ */
+
++#include <limits.h>
+ #include <stdio.h>
+
+ #include <gssrpc/types.h>
+@@ -75,7 +76,8 @@
+ return (FALSE);
+ }
+ c = *sizep;
+- if ((c > maxsize) && (xdrs->x_op != XDR_FREE)) {
++ if ((c > maxsize || UINT_MAX/elsize < c) &&
++ (xdrs->x_op != XDR_FREE)) {
+ return (FALSE);
+ }
+ nodesize = c * elsize;