summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorwpaul <wpaul@FreeBSD.org>1998-05-15 22:53:47 +0000
committerwpaul <wpaul@FreeBSD.org>1998-05-15 22:53:47 +0000
commit22b36bc76e6cb62c9cd29f3f988060d80af834c8 (patch)
treefdf1adc9cabf4a81dce2f32f6b60cd08e8be023c /lib
parentfd2f352d6a9d0f85908a776189dc6b616ff6087c (diff)
downloadFreeBSD-src-22b36bc76e6cb62c9cd29f3f988060d80af834c8.zip
FreeBSD-src-22b36bc76e6cb62c9cd29f3f988060d80af834c8.tar.gz
Patch RPC library to avoid possible denial of service attacks as described
recently in BUGTRAQ. If a stream oriented transport fails to properly decode an RPC message header structure where there should be one, it should mark the stream as dead so that the connection will be dropped.
Diffstat (limited to 'lib')
-rw-r--r--lib/libc/rpc/svc_tcp.c3
-rw-r--r--lib/libc/rpc/svc_unix.c3
2 files changed, 4 insertions, 2 deletions
diff --git a/lib/libc/rpc/svc_tcp.c b/lib/libc/rpc/svc_tcp.c
index 1387ee1..bafa6c3 100644
--- a/lib/libc/rpc/svc_tcp.c
+++ b/lib/libc/rpc/svc_tcp.c
@@ -30,7 +30,7 @@
#if defined(LIBC_SCCS) && !defined(lint)
/*static char *sccsid = "from: @(#)svc_tcp.c 1.21 87/08/11 Copyr 1984 Sun Micro";*/
/*static char *sccsid = "from: @(#)svc_tcp.c 2.2 88/08/01 4.0 RPCSRC";*/
-static char *rcsid = "$Id: svc_tcp.c,v 1.8 1996/12/30 15:19:08 peter Exp $";
+static char *rcsid = "$Id: svc_tcp.c,v 1.11 1997/05/28 05:05:30 wpaul Exp $";
#endif
/*
@@ -404,6 +404,7 @@ svctcp_recv(xprt, msg)
cd->x_id = msg->rm_xid;
return (TRUE);
}
+ cd->strm_stat = XPRT_DIED; /* XXXX */
return (FALSE);
}
diff --git a/lib/libc/rpc/svc_unix.c b/lib/libc/rpc/svc_unix.c
index 04e3223..eb2e8f2 100644
--- a/lib/libc/rpc/svc_unix.c
+++ b/lib/libc/rpc/svc_unix.c
@@ -30,7 +30,7 @@
#if defined(LIBC_SCCS) && !defined(lint)
/*static char *sccsid = "from: @(#)svc_unix.c 1.21 87/08/11 Copyr 1984 Sun Micro";*/
/*static char *sccsid = "from: @(#)svc_unix.c 2.2 88/08/01 4.0 RPCSRC";*/
-static char *rcsid = "$Id: svc_unix.c,v 1.8 1996/12/30 15:19:08 peter Exp $";
+static char *rcsid = "$Id: svc_unix.c,v 1.2 1997/05/28 05:05:31 wpaul Exp $";
#endif
/*
@@ -467,6 +467,7 @@ svcunix_recv(xprt, msg)
msg->rm_call.cb_verf.oa_length = sizeof(cm);
return (TRUE);
}
+ cd->strm_stat = XPRT_DIED; /* XXXX */
return (FALSE);
}
OpenPOWER on IntegriCloud