Fix CVE-2017-8779: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779 Patch copied from the bug reporter's 3rd-party repository: https://github.com/guidovranken/rpcbomb/blob/master/rpcbind_patch.txt diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c index 5862c26..e11f61b 100644 --- a/src/rpcb_svc_com.c +++ b/src/rpcb_svc_com.c @@ -48,6 +48,7 @@ #include #include #include +#include #include #include #include @@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/, static bool_t xdr_encap_parms(XDR *xdrs, struct encap_parms *epp) { - return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0)); + return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE)); } /* t type='submit' value='switch'/> Wojtek's customized Guix
aboutsummaryrefslogtreecommitdiff
path: root/nix
diff options
context:
space:
mode:
authorEfraim Flashner <efraim@flashner.co.il>2016-02-02 23:17:55 +0200
committerEfraim Flashner <efraim@flashner.co.il>2016-02-02 23:23:24 +0200
commite81e5fa5070135e8b3bc2b23235a3fe092b551d2 (patch)
tree6f2d178dc52202b04e8fbe60d80ad7f2c63b55fb /nix
parent400ed6acdd275f1135aad520baa7379eb6b8cff6 (diff)
downloadguix-e81e5fa5070135e8b3bc2b23235a3fe092b551d2.tar.gz
guix-e81e5fa5070135e8b3bc2b23235a3fe092b551d2.zip
gnu: openssl: Add alternate url.
* gnu/packages/tls.scm (openssl)[source]: Add alternate url.
Diffstat (limited to 'nix')
0 files changed, 0 insertions, 0 deletions