[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#862898: marked as done (unblock: ntirpc/1.4.4-1)



Your message dated Thu, 18 May 2017 18:52:00 +0000
with message-id <fa9243b3-de77-f959-4f3a-f61d50387cd7@thykier.net>
and subject line Re: Bug#862898: unblock: ntirpc/1.4.4-1
has caused the Debian Bug report #862898,
regarding unblock: ntirpc/1.4.4-1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
862898: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862898
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: important
User: release.debian.org@packages.debian.org
Usertags: unblock

Please unblock package ntirpc

Hi,

ntirpc/1.4.4-1, which was uploaded some days ago to unstable fixes
release critical CVE-2017-8779 bug #861836.

Thanks

Christoph
-- 
============================================================================
Christoph Martin, Leiter Unix-Systeme
Zentrum für Datenverarbeitung, Uni-Mainz, Germany
 Anselm Franz von Bentzel-Weg 12, 55128 Mainz
 Telefon: +49(6131)3926337
 Instant-Messaging: Jabber: martin@jabber.uni-mainz.de
  (Siehe http://www.zdv.uni-mainz.de/4010.php)
diff -Nru ntirpc-1.4.3/CMakeLists.txt ntirpc-1.4.4/CMakeLists.txt
--- ntirpc-1.4.3/CMakeLists.txt	2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/CMakeLists.txt	2017-05-05 21:07:02.000000000 +0200
@@ -15,7 +15,7 @@
 # version numbers
 set(NTIRPC_MAJOR_VERSION 1)
 set(NTIRPC_MINOR_VERSION 4)
-set(NTIRPC_PATCH_LEVEL 3)
+set(NTIRPC_PATCH_LEVEL 4)
 set(VERSION_COMMENT
   "Full-duplex and bi-directional ONC RPC on TCP."
 )
diff -Nru ntirpc-1.4.3/debian/changelog ntirpc-1.4.4/debian/changelog
--- ntirpc-1.4.3/debian/changelog	2017-04-07 13:54:21.000000000 +0200
+++ ntirpc-1.4.4/debian/changelog	2017-05-15 09:53:09.000000000 +0200
@@ -1,3 +1,11 @@
+ntirpc (1.4.4-1) unstable; urgency=high
+
+  [ Christoph Martin ]
+  * Imported Upstream version 1.4.4
+  * fixes rpcbomb CVE-2017-8779 (closes: #861836)
+
+ -- Christoph Martin <martin@uni-mainz.de>  Mon, 15 May 2017 09:53:09 +0200
+
 ntirpc (1.4.3-3) unstable; urgency=medium
 
   * link with libatomic if necessary (closes: #859689)
diff -Nru ntirpc-1.4.3/debian/libntirpc1.4.symbols ntirpc-1.4.4/debian/libntirpc1.4.symbols
--- ntirpc-1.4.3/debian/libntirpc1.4.symbols	2017-04-07 13:54:21.000000000 +0200
+++ ntirpc-1.4.4/debian/libntirpc1.4.symbols	2017-05-15 09:53:09.000000000 +0200
@@ -1,253 +1,253 @@
 libntirpc.so.1.4 libntirpc1.4 #MINVER#
- NTIRPC_1.4.3@NTIRPC_1.4.3 1.4.3
+ NTIRPC_1.4.4@NTIRPC_1.4.4 1.4.4
  NTIRPC_PRIVATE@NTIRPC_PRIVATE 1.4.3
- __ntirpc_pkg_params@NTIRPC_1.4.3 1.4.3
- __rpc_createerr@NTIRPC_1.4.3 1.4.3
- __rpc_dtbsize@NTIRPC_1.4.3 1.4.3
- __rpc_endconf@NTIRPC_1.4.3 1.4.3
- __rpc_fd2sockinfo@NTIRPC_1.4.3 1.4.3
- __rpc_fixup_addr@NTIRPC_1.4.3 1.4.3
- __rpc_get_a_size@NTIRPC_1.4.3 1.4.3
- __rpc_get_local_uid@NTIRPC_1.4.3 1.4.3
- __rpc_get_t_size@NTIRPC_1.4.3 1.4.3
- __rpc_getconf@NTIRPC_1.4.3 1.4.3
- __rpc_getconfip@NTIRPC_1.4.3 1.4.3
- __rpc_nconf2fd@NTIRPC_1.4.3 1.4.3
- __rpc_nconf2fd_flags@NTIRPC_1.4.3 1.4.3
- __rpc_nconf2sockinfo@NTIRPC_1.4.3 1.4.3
- __rpc_rawcombuf@NTIRPC_1.4.3 1.4.3
- __rpc_seman2socktype@NTIRPC_1.4.3 1.4.3
- __rpc_setconf@NTIRPC_1.4.3 1.4.3
- __rpc_sockinfo2netid@NTIRPC_1.4.3 1.4.3
- __rpc_sockisbound@NTIRPC_1.4.3 1.4.3
- __rpc_socktype2seman@NTIRPC_1.4.3 1.4.3
- __rpc_taddr2uaddr_af@NTIRPC_1.4.3 1.4.3
- __rpc_uaddr2taddr_af@NTIRPC_1.4.3 1.4.3
- __rpcgettp@NTIRPC_1.4.3 1.4.3
- _get_next_token@NTIRPC_1.4.3 1.4.3
- _null_auth@NTIRPC_1.4.3 1.4.3
- _rpc_dtablesize@NTIRPC_1.4.3 1.4.3
- _seterr_reply@NTIRPC_1.4.3 1.4.3
- _svcauth_gss@NTIRPC_1.4.3 1.4.3
- _svcauth_none@NTIRPC_1.4.3 1.4.3
- _svcauth_short@NTIRPC_1.4.3 1.4.3
- _svcauth_unix@NTIRPC_1.4.3 1.4.3
- authgss_get_private_data@NTIRPC_1.4.3 1.4.3
- authgss_ncreate@NTIRPC_1.4.3 1.4.3
- authgss_ncreate_default@NTIRPC_1.4.3 1.4.3
- authgss_service@NTIRPC_1.4.3 1.4.3
- authnone_ncreate@NTIRPC_1.4.3 1.4.3
- authunix_ncreate@NTIRPC_1.4.3 1.4.3
- authunix_ncreate_default@NTIRPC_1.4.3 1.4.3
- bindresvport@NTIRPC_1.4.3 1.4.3
- bindresvport_sa@NTIRPC_1.4.3 1.4.3
- callrpc@NTIRPC_1.4.3 1.4.3
- clnt_broadcast@NTIRPC_1.4.3 1.4.3
- clnt_dg_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_ncreate_timed@NTIRPC_1.4.3 1.4.3
- clnt_ncreate_vers@NTIRPC_1.4.3 1.4.3
- clnt_ncreate_vers_timed@NTIRPC_1.4.3 1.4.3
- clnt_pcreateerror@NTIRPC_1.4.3 1.4.3
- clnt_perrno@NTIRPC_1.4.3 1.4.3
- clnt_perror@NTIRPC_1.4.3 1.4.3
- clnt_raw_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_spcreateerror@NTIRPC_1.4.3 1.4.3
- clnt_sperrno@NTIRPC_1.4.3 1.4.3
- clnt_sperror@NTIRPC_1.4.3 1.4.3
- clnt_tp_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_tp_ncreate_timed@NTIRPC_1.4.3 1.4.3
- clnt_vc_ncreate2@NTIRPC_1.4.3 1.4.3
- clnt_vc_ncreate@NTIRPC_1.4.3 1.4.3
- clnt_vc_ncreate_svc@NTIRPC_1.4.3 1.4.3
- clntraw_ncreate@NTIRPC_1.4.3 1.4.3
- clnttcp_ncreate@NTIRPC_1.4.3 1.4.3
- clntudp_nbufcreate@NTIRPC_1.4.3 1.4.3
- clntudp_ncreate@NTIRPC_1.4.3 1.4.3
- clntunix_ncreate@NTIRPC_1.4.3 1.4.3
- endnetconfig@NTIRPC_1.4.3 1.4.3
- endnetpath@NTIRPC_1.4.3 1.4.3
- endrpcent@NTIRPC_1.4.3 1.4.3
- free_rpc_msg@NTIRPC_1.4.3 1.4.3
- freenetconfigent@NTIRPC_1.4.3 1.4.3
- get_myaddress@NTIRPC_1.4.3 1.4.3
- getnetconfig@NTIRPC_1.4.3 1.4.3
- getnetconfigent@NTIRPC_1.4.3 1.4.3
- getnetpath@NTIRPC_1.4.3 1.4.3
- getrpcent@NTIRPC_1.4.3 1.4.3
- getrpcport@NTIRPC_1.4.3 1.4.3
- nc_perror@NTIRPC_1.4.3 1.4.3
- nc_sperror@NTIRPC_1.4.3 1.4.3
- opr_rbtree_first@NTIRPC_1.4.3 1.4.3
- opr_rbtree_init@NTIRPC_1.4.3 1.4.3
- opr_rbtree_insert@NTIRPC_1.4.3 1.4.3
- opr_rbtree_insert_at@NTIRPC_1.4.3 1.4.3
- opr_rbtree_last@NTIRPC_1.4.3 1.4.3
- opr_rbtree_lookup@NTIRPC_1.4.3 1.4.3
- opr_rbtree_next@NTIRPC_1.4.3 1.4.3
- opr_rbtree_prev@NTIRPC_1.4.3 1.4.3
- opr_rbtree_remove@NTIRPC_1.4.3 1.4.3
- opr_rbtree_replace@NTIRPC_1.4.3 1.4.3
- pmap_getmaps@NTIRPC_1.4.3 1.4.3
- pmap_getport@NTIRPC_1.4.3 1.4.3
- pmap_rmtcall@NTIRPC_1.4.3 1.4.3
- pmap_set@NTIRPC_1.4.3 1.4.3
- pmap_unset@NTIRPC_1.4.3 1.4.3
- rbtx_init@NTIRPC_1.4.3 1.4.3
- registerrpc@NTIRPC_1.4.3 1.4.3
- rpc_broadcast@NTIRPC_1.4.3 1.4.3
- rpc_broadcast_exp@NTIRPC_1.4.3 1.4.3
- rpc_call@NTIRPC_1.4.3 1.4.3
- rpc_control@NTIRPC_1.4.3 1.4.3
- rpc_createerr@NTIRPC_1.4.3 1.4.3
- rpc_nullproc@NTIRPC_1.4.3 1.4.3
- rpc_reg@NTIRPC_1.4.3 1.4.3
- rpcb_find_mapped_addr@NTIRPC_1.4.3 1.4.3
- rpcb_getaddr@NTIRPC_1.4.3 1.4.3
- rpcb_getmaps@NTIRPC_1.4.3 1.4.3
- rpcb_rmtcall@NTIRPC_1.4.3 1.4.3
- rpcb_set@NTIRPC_1.4.3 1.4.3
- rpcb_taddr2uaddr@NTIRPC_1.4.3 1.4.3
- rpcb_uaddr2taddr@NTIRPC_1.4.3 1.4.3
- rpcb_unset@NTIRPC_1.4.3 1.4.3
- setnetconfig@NTIRPC_1.4.3 1.4.3
- setnetpath@NTIRPC_1.4.3 1.4.3
- setrpcent@NTIRPC_1.4.3 1.4.3
- svc_auth_authenticate@NTIRPC_1.4.3 1.4.3
- svc_auth_reg@NTIRPC_1.4.3 1.4.3
- svc_dg_ncreate@NTIRPC_1.4.3 1.4.3
- svc_exit@NTIRPC_1.4.3 1.4.3
- svc_fd_ncreate2@NTIRPC_1.4.3 1.4.3
- svc_fd_ncreate@NTIRPC_1.4.3 1.4.3
- svc_init@NTIRPC_1.4.3 1.4.3
- svc_ncreate@NTIRPC_1.4.3 1.4.3
- svc_raw_ncreate@NTIRPC_1.4.3 1.4.3
- svc_reg@NTIRPC_1.4.3 1.4.3
- svc_register@NTIRPC_1.4.3 1.4.3
- svc_rqst_evchan_reg@NTIRPC_1.4.3 1.4.3
- svc_rqst_new_evchan@NTIRPC_1.4.3 1.4.3
- svc_rqst_rearm_events@NTIRPC_1.4.3 1.4.3
- svc_rqst_thrd_run@NTIRPC_1.4.3 1.4.3
- svc_rqst_thrd_signal@NTIRPC_1.4.3 1.4.3
- svc_run@NTIRPC_1.4.3 1.4.3
- svc_run_epoll@NTIRPC_1.4.3 1.4.3
- svc_sendreply@NTIRPC_1.4.3 1.4.3
- svc_shutdown@NTIRPC_1.4.3 1.4.3
- svc_tli_ncreate@NTIRPC_1.4.3 1.4.3
- svc_tp_ncreate@NTIRPC_1.4.3 1.4.3
- svc_unreg@NTIRPC_1.4.3 1.4.3
- svc_unregister@NTIRPC_1.4.3 1.4.3
- svc_validate_xprt_list@NTIRPC_1.4.3 1.4.3
- svc_vc_ncreate2@NTIRPC_1.4.3 1.4.3
- svc_vc_ncreate@NTIRPC_1.4.3 1.4.3
- svc_xprt_trace@NTIRPC_1.4.3 1.4.3
- svcauth_gss_acquire_cred@NTIRPC_1.4.3 1.4.3
- svcauth_gss_destroy@NTIRPC_1.4.3 1.4.3
- svcauth_gss_get_principal@NTIRPC_1.4.3 1.4.3
- svcauth_gss_import_name@NTIRPC_1.4.3 1.4.3
- svcauth_gss_nextverf@NTIRPC_1.4.3 1.4.3
- svcauth_gss_release_cred@NTIRPC_1.4.3 1.4.3
- svcauth_gss_set_svc_name@NTIRPC_1.4.3 1.4.3
- svcerr_auth@NTIRPC_1.4.3 1.4.3
- svcerr_decode@NTIRPC_1.4.3 1.4.3
- svcerr_noproc@NTIRPC_1.4.3 1.4.3
- svcerr_noprog@NTIRPC_1.4.3 1.4.3
- svcerr_progvers@NTIRPC_1.4.3 1.4.3
- svcerr_systemerr@NTIRPC_1.4.3 1.4.3
- svcerr_weakauth@NTIRPC_1.4.3 1.4.3
- svcraw_ncreate@NTIRPC_1.4.3 1.4.3
- svctcp_ncreate@NTIRPC_1.4.3 1.4.3
- svcudp_nbufcreate@NTIRPC_1.4.3 1.4.3
- svcudp_ncreate@NTIRPC_1.4.3 1.4.3
- svcunix_ncreate@NTIRPC_1.4.3 1.4.3
- svcunixfd_ncreate@NTIRPC_1.4.3 1.4.3
- taddr2uaddr@NTIRPC_1.4.3 1.4.3
- tirpc_control@NTIRPC_1.4.3 1.4.3
- uaddr2taddr@NTIRPC_1.4.3 1.4.3
- xdr_array@NTIRPC_1.4.3 1.4.3
- xdr_authunix_parms@NTIRPC_1.4.3 1.4.3
- xdr_bool@NTIRPC_1.4.3 1.4.3
- xdr_bytes@NTIRPC_1.4.3 1.4.3
- xdr_call_decode@NTIRPC_1.4.3 1.4.3
- xdr_call_encode@NTIRPC_1.4.3 1.4.3
- xdr_char@NTIRPC_1.4.3 1.4.3
- xdr_double@NTIRPC_1.4.3 1.4.3
- xdr_dplx_decode@NTIRPC_1.4.3 1.4.3
- xdr_dplx_msg@NTIRPC_1.4.3 1.4.3
- xdr_enum@NTIRPC_1.4.3 1.4.3
- xdr_float@NTIRPC_1.4.3 1.4.3
- xdr_free_null_stream@NTIRPC_1.4.3 1.4.3
- xdr_hyper@NTIRPC_1.4.3 1.4.3
- xdr_inrec_cksum@NTIRPC_1.4.3 1.4.3
- xdr_inrec_create@NTIRPC_1.4.3 1.4.3
- xdr_inrec_eof@NTIRPC_1.4.3 1.4.3
- xdr_inrec_readahead@NTIRPC_1.4.3 1.4.3
- xdr_inrec_skiprecord@NTIRPC_1.4.3 1.4.3
- xdr_int16_t@NTIRPC_1.4.3 1.4.3
- xdr_int32_t@NTIRPC_1.4.3 1.4.3
- xdr_int64_t@NTIRPC_1.4.3 1.4.3
- xdr_int@NTIRPC_1.4.3 1.4.3
- xdr_long@NTIRPC_1.4.3 1.4.3
- xdr_longlong_t@NTIRPC_1.4.3 1.4.3
- xdr_naccepted_reply@NTIRPC_1.4.3 1.4.3
- xdr_ncallhdr@NTIRPC_1.4.3 1.4.3
- xdr_ncallmsg@NTIRPC_1.4.3 1.4.3
- xdr_netbuf@NTIRPC_1.4.3 1.4.3
- xdr_nnetobj@NTIRPC_1.4.3 1.4.3
- xdr_nrejected_reply@NTIRPC_1.4.3 1.4.3
- xdr_nreplymsg@NTIRPC_1.4.3 1.4.3
- xdr_opaque@NTIRPC_1.4.3 1.4.3
- xdr_opaque_auth@NTIRPC_1.4.3 1.4.3
- xdr_pmap@NTIRPC_1.4.3 1.4.3
- xdr_pmaplist@NTIRPC_1.4.3 1.4.3
- xdr_pmaplist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_pointer@NTIRPC_1.4.3 1.4.3
- xdr_reference@NTIRPC_1.4.3 1.4.3
- xdr_rmtcall_args@NTIRPC_1.4.3 1.4.3
- xdr_rmtcallres@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_buf@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_cred@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_data@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_init_args@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_init_res@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_unwrap_data@NTIRPC_1.4.3 1.4.3
- xdr_rpc_gss_wrap_data@NTIRPC_1.4.3 1.4.3
- xdr_rpcb@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_entry@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_entry_list_ptr@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_rmtcallargs@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_rmtcallres@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_stat@NTIRPC_1.4.3 1.4.3
- xdr_rpcb_stat_byvers@NTIRPC_1.4.3 1.4.3
- xdr_rpcblist@NTIRPC_1.4.3 1.4.3
- xdr_rpcblist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_addrlist@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_addrlist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_proc@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_rmtcalllist@NTIRPC_1.4.3 1.4.3
- xdr_rpcbs_rmtcalllist_ptr@NTIRPC_1.4.3 1.4.3
- xdr_short@NTIRPC_1.4.3 1.4.3
- xdr_string@NTIRPC_1.4.3 1.4.3
- xdr_u_char@NTIRPC_1.4.3 1.4.3
- xdr_u_hyper@NTIRPC_1.4.3 1.4.3
- xdr_u_int16_t@NTIRPC_1.4.3 1.4.3
- xdr_u_int32_t@NTIRPC_1.4.3 1.4.3
- xdr_u_int64_t@NTIRPC_1.4.3 1.4.3
- xdr_u_int@NTIRPC_1.4.3 1.4.3
- xdr_u_long@NTIRPC_1.4.3 1.4.3
- xdr_u_longlong_t@NTIRPC_1.4.3 1.4.3
- xdr_u_short@NTIRPC_1.4.3 1.4.3
- xdr_uint32_t@NTIRPC_1.4.3 1.4.3
- xdr_uint64_t@NTIRPC_1.4.3 1.4.3
- xdr_union@NTIRPC_1.4.3 1.4.3
- xdr_vector@NTIRPC_1.4.3 1.4.3
- xdr_void@NTIRPC_1.4.3 1.4.3
- xdr_wrapstring@NTIRPC_1.4.3 1.4.3
- xdrmem_ncreate@NTIRPC_1.4.3 1.4.3
- xdrrec_create@NTIRPC_1.4.3 1.4.3
- xdrrec_endofrecord@NTIRPC_1.4.3 1.4.3
- xdrrec_eof@NTIRPC_1.4.3 1.4.3
- xdrrec_skiprecord@NTIRPC_1.4.3 1.4.3
- xdrstdio_create@NTIRPC_1.4.3 1.4.3
- xprt_register@NTIRPC_1.4.3 1.4.3
- xprt_unregister@NTIRPC_1.4.3 1.4.3
+ __ntirpc_pkg_params@NTIRPC_1.4.4 1.4.4
+ __rpc_createerr@NTIRPC_1.4.4 1.4.4
+ __rpc_dtbsize@NTIRPC_1.4.4 1.4.4
+ __rpc_endconf@NTIRPC_1.4.4 1.4.4
+ __rpc_fd2sockinfo@NTIRPC_1.4.4 1.4.4
+ __rpc_fixup_addr@NTIRPC_1.4.4 1.4.4
+ __rpc_get_a_size@NTIRPC_1.4.4 1.4.4
+ __rpc_get_local_uid@NTIRPC_1.4.4 1.4.4
+ __rpc_get_t_size@NTIRPC_1.4.4 1.4.4
+ __rpc_getconf@NTIRPC_1.4.4 1.4.4
+ __rpc_getconfip@NTIRPC_1.4.4 1.4.4
+ __rpc_nconf2fd@NTIRPC_1.4.4 1.4.4
+ __rpc_nconf2fd_flags@NTIRPC_1.4.4 1.4.4
+ __rpc_nconf2sockinfo@NTIRPC_1.4.4 1.4.4
+ __rpc_rawcombuf@NTIRPC_1.4.4 1.4.4
+ __rpc_seman2socktype@NTIRPC_1.4.4 1.4.4
+ __rpc_setconf@NTIRPC_1.4.4 1.4.4
+ __rpc_sockinfo2netid@NTIRPC_1.4.4 1.4.4
+ __rpc_sockisbound@NTIRPC_1.4.4 1.4.4
+ __rpc_socktype2seman@NTIRPC_1.4.4 1.4.4
+ __rpc_taddr2uaddr_af@NTIRPC_1.4.4 1.4.4
+ __rpc_uaddr2taddr_af@NTIRPC_1.4.4 1.4.4
+ __rpcgettp@NTIRPC_1.4.4 1.4.4
+ _get_next_token@NTIRPC_1.4.4 1.4.4
+ _null_auth@NTIRPC_1.4.4 1.4.4
+ _rpc_dtablesize@NTIRPC_1.4.4 1.4.4
+ _seterr_reply@NTIRPC_1.4.4 1.4.4
+ _svcauth_gss@NTIRPC_1.4.4 1.4.4
+ _svcauth_none@NTIRPC_1.4.4 1.4.4
+ _svcauth_short@NTIRPC_1.4.4 1.4.4
+ _svcauth_unix@NTIRPC_1.4.4 1.4.4
+ authgss_get_private_data@NTIRPC_1.4.4 1.4.4
+ authgss_ncreate@NTIRPC_1.4.4 1.4.4
+ authgss_ncreate_default@NTIRPC_1.4.4 1.4.4
+ authgss_service@NTIRPC_1.4.4 1.4.4
+ authnone_ncreate@NTIRPC_1.4.4 1.4.4
+ authunix_ncreate@NTIRPC_1.4.4 1.4.4
+ authunix_ncreate_default@NTIRPC_1.4.4 1.4.4
+ bindresvport@NTIRPC_1.4.4 1.4.4
+ bindresvport_sa@NTIRPC_1.4.4 1.4.4
+ callrpc@NTIRPC_1.4.4 1.4.4
+ clnt_broadcast@NTIRPC_1.4.4 1.4.4
+ clnt_dg_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate_timed@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate_vers@NTIRPC_1.4.4 1.4.4
+ clnt_ncreate_vers_timed@NTIRPC_1.4.4 1.4.4
+ clnt_pcreateerror@NTIRPC_1.4.4 1.4.4
+ clnt_perrno@NTIRPC_1.4.4 1.4.4
+ clnt_perror@NTIRPC_1.4.4 1.4.4
+ clnt_raw_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_spcreateerror@NTIRPC_1.4.4 1.4.4
+ clnt_sperrno@NTIRPC_1.4.4 1.4.4
+ clnt_sperror@NTIRPC_1.4.4 1.4.4
+ clnt_tp_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_tp_ncreate_timed@NTIRPC_1.4.4 1.4.4
+ clnt_vc_ncreate2@NTIRPC_1.4.4 1.4.4
+ clnt_vc_ncreate@NTIRPC_1.4.4 1.4.4
+ clnt_vc_ncreate_svc@NTIRPC_1.4.4 1.4.4
+ clntraw_ncreate@NTIRPC_1.4.4 1.4.4
+ clnttcp_ncreate@NTIRPC_1.4.4 1.4.4
+ clntudp_nbufcreate@NTIRPC_1.4.4 1.4.4
+ clntudp_ncreate@NTIRPC_1.4.4 1.4.4
+ clntunix_ncreate@NTIRPC_1.4.4 1.4.4
+ endnetconfig@NTIRPC_1.4.4 1.4.4
+ endnetpath@NTIRPC_1.4.4 1.4.4
+ endrpcent@NTIRPC_1.4.4 1.4.4
+ free_rpc_msg@NTIRPC_1.4.4 1.4.4
+ freenetconfigent@NTIRPC_1.4.4 1.4.4
+ get_myaddress@NTIRPC_1.4.4 1.4.4
+ getnetconfig@NTIRPC_1.4.4 1.4.4
+ getnetconfigent@NTIRPC_1.4.4 1.4.4
+ getnetpath@NTIRPC_1.4.4 1.4.4
+ getrpcent@NTIRPC_1.4.4 1.4.4
+ getrpcport@NTIRPC_1.4.4 1.4.4
+ nc_perror@NTIRPC_1.4.4 1.4.4
+ nc_sperror@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_first@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_init@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_insert@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_insert_at@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_last@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_lookup@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_next@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_prev@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_remove@NTIRPC_1.4.4 1.4.4
+ opr_rbtree_replace@NTIRPC_1.4.4 1.4.4
+ pmap_getmaps@NTIRPC_1.4.4 1.4.4
+ pmap_getport@NTIRPC_1.4.4 1.4.4
+ pmap_rmtcall@NTIRPC_1.4.4 1.4.4
+ pmap_set@NTIRPC_1.4.4 1.4.4
+ pmap_unset@NTIRPC_1.4.4 1.4.4
+ rbtx_init@NTIRPC_1.4.4 1.4.4
+ registerrpc@NTIRPC_1.4.4 1.4.4
+ rpc_broadcast@NTIRPC_1.4.4 1.4.4
+ rpc_broadcast_exp@NTIRPC_1.4.4 1.4.4
+ rpc_call@NTIRPC_1.4.4 1.4.4
+ rpc_control@NTIRPC_1.4.4 1.4.4
+ rpc_createerr@NTIRPC_1.4.4 1.4.4
+ rpc_nullproc@NTIRPC_1.4.4 1.4.4
+ rpc_reg@NTIRPC_1.4.4 1.4.4
+ rpcb_find_mapped_addr@NTIRPC_1.4.4 1.4.4
+ rpcb_getaddr@NTIRPC_1.4.4 1.4.4
+ rpcb_getmaps@NTIRPC_1.4.4 1.4.4
+ rpcb_rmtcall@NTIRPC_1.4.4 1.4.4
+ rpcb_set@NTIRPC_1.4.4 1.4.4
+ rpcb_taddr2uaddr@NTIRPC_1.4.4 1.4.4
+ rpcb_uaddr2taddr@NTIRPC_1.4.4 1.4.4
+ rpcb_unset@NTIRPC_1.4.4 1.4.4
+ setnetconfig@NTIRPC_1.4.4 1.4.4
+ setnetpath@NTIRPC_1.4.4 1.4.4
+ setrpcent@NTIRPC_1.4.4 1.4.4
+ svc_auth_authenticate@NTIRPC_1.4.4 1.4.4
+ svc_auth_reg@NTIRPC_1.4.4 1.4.4
+ svc_dg_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_exit@NTIRPC_1.4.4 1.4.4
+ svc_fd_ncreate2@NTIRPC_1.4.4 1.4.4
+ svc_fd_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_init@NTIRPC_1.4.4 1.4.4
+ svc_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_raw_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_reg@NTIRPC_1.4.4 1.4.4
+ svc_register@NTIRPC_1.4.4 1.4.4
+ svc_rqst_evchan_reg@NTIRPC_1.4.4 1.4.4
+ svc_rqst_new_evchan@NTIRPC_1.4.4 1.4.4
+ svc_rqst_rearm_events@NTIRPC_1.4.4 1.4.4
+ svc_rqst_thrd_run@NTIRPC_1.4.4 1.4.4
+ svc_rqst_thrd_signal@NTIRPC_1.4.4 1.4.4
+ svc_run@NTIRPC_1.4.4 1.4.4
+ svc_run_epoll@NTIRPC_1.4.4 1.4.4
+ svc_sendreply@NTIRPC_1.4.4 1.4.4
+ svc_shutdown@NTIRPC_1.4.4 1.4.4
+ svc_tli_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_tp_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_unreg@NTIRPC_1.4.4 1.4.4
+ svc_unregister@NTIRPC_1.4.4 1.4.4
+ svc_validate_xprt_list@NTIRPC_1.4.4 1.4.4
+ svc_vc_ncreate2@NTIRPC_1.4.4 1.4.4
+ svc_vc_ncreate@NTIRPC_1.4.4 1.4.4
+ svc_xprt_trace@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_acquire_cred@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_destroy@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_get_principal@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_import_name@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_nextverf@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_release_cred@NTIRPC_1.4.4 1.4.4
+ svcauth_gss_set_svc_name@NTIRPC_1.4.4 1.4.4
+ svcerr_auth@NTIRPC_1.4.4 1.4.4
+ svcerr_decode@NTIRPC_1.4.4 1.4.4
+ svcerr_noproc@NTIRPC_1.4.4 1.4.4
+ svcerr_noprog@NTIRPC_1.4.4 1.4.4
+ svcerr_progvers@NTIRPC_1.4.4 1.4.4
+ svcerr_systemerr@NTIRPC_1.4.4 1.4.4
+ svcerr_weakauth@NTIRPC_1.4.4 1.4.4
+ svcraw_ncreate@NTIRPC_1.4.4 1.4.4
+ svctcp_ncreate@NTIRPC_1.4.4 1.4.4
+ svcudp_nbufcreate@NTIRPC_1.4.4 1.4.4
+ svcudp_ncreate@NTIRPC_1.4.4 1.4.4
+ svcunix_ncreate@NTIRPC_1.4.4 1.4.4
+ svcunixfd_ncreate@NTIRPC_1.4.4 1.4.4
+ taddr2uaddr@NTIRPC_1.4.4 1.4.4
+ tirpc_control@NTIRPC_1.4.4 1.4.4
+ uaddr2taddr@NTIRPC_1.4.4 1.4.4
+ xdr_array@NTIRPC_1.4.4 1.4.4
+ xdr_authunix_parms@NTIRPC_1.4.4 1.4.4
+ xdr_bool@NTIRPC_1.4.4 1.4.4
+ xdr_bytes@NTIRPC_1.4.4 1.4.4
+ xdr_call_decode@NTIRPC_1.4.4 1.4.4
+ xdr_call_encode@NTIRPC_1.4.4 1.4.4
+ xdr_char@NTIRPC_1.4.4 1.4.4
+ xdr_double@NTIRPC_1.4.4 1.4.4
+ xdr_dplx_decode@NTIRPC_1.4.4 1.4.4
+ xdr_dplx_msg@NTIRPC_1.4.4 1.4.4
+ xdr_enum@NTIRPC_1.4.4 1.4.4
+ xdr_float@NTIRPC_1.4.4 1.4.4
+ xdr_free_null_stream@NTIRPC_1.4.4 1.4.4
+ xdr_hyper@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_cksum@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_create@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_eof@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_readahead@NTIRPC_1.4.4 1.4.4
+ xdr_inrec_skiprecord@NTIRPC_1.4.4 1.4.4
+ xdr_int16_t@NTIRPC_1.4.4 1.4.4
+ xdr_int32_t@NTIRPC_1.4.4 1.4.4
+ xdr_int64_t@NTIRPC_1.4.4 1.4.4
+ xdr_int@NTIRPC_1.4.4 1.4.4
+ xdr_long@NTIRPC_1.4.4 1.4.4
+ xdr_longlong_t@NTIRPC_1.4.4 1.4.4
+ xdr_naccepted_reply@NTIRPC_1.4.4 1.4.4
+ xdr_ncallhdr@NTIRPC_1.4.4 1.4.4
+ xdr_ncallmsg@NTIRPC_1.4.4 1.4.4
+ xdr_netbuf@NTIRPC_1.4.4 1.4.4
+ xdr_nnetobj@NTIRPC_1.4.4 1.4.4
+ xdr_nrejected_reply@NTIRPC_1.4.4 1.4.4
+ xdr_nreplymsg@NTIRPC_1.4.4 1.4.4
+ xdr_opaque@NTIRPC_1.4.4 1.4.4
+ xdr_opaque_auth@NTIRPC_1.4.4 1.4.4
+ xdr_pmap@NTIRPC_1.4.4 1.4.4
+ xdr_pmaplist@NTIRPC_1.4.4 1.4.4
+ xdr_pmaplist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_pointer@NTIRPC_1.4.4 1.4.4
+ xdr_reference@NTIRPC_1.4.4 1.4.4
+ xdr_rmtcall_args@NTIRPC_1.4.4 1.4.4
+ xdr_rmtcallres@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_buf@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_cred@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_data@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_init_args@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_init_res@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_unwrap_data@NTIRPC_1.4.4 1.4.4
+ xdr_rpc_gss_wrap_data@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_entry@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_entry_list_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_rmtcallargs@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_rmtcallres@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_stat@NTIRPC_1.4.4 1.4.4
+ xdr_rpcb_stat_byvers@NTIRPC_1.4.4 1.4.4
+ xdr_rpcblist@NTIRPC_1.4.4 1.4.4
+ xdr_rpcblist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_addrlist@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_addrlist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_proc@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_rmtcalllist@NTIRPC_1.4.4 1.4.4
+ xdr_rpcbs_rmtcalllist_ptr@NTIRPC_1.4.4 1.4.4
+ xdr_short@NTIRPC_1.4.4 1.4.4
+ xdr_string@NTIRPC_1.4.4 1.4.4
+ xdr_u_char@NTIRPC_1.4.4 1.4.4
+ xdr_u_hyper@NTIRPC_1.4.4 1.4.4
+ xdr_u_int16_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_int32_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_int64_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_int@NTIRPC_1.4.4 1.4.4
+ xdr_u_long@NTIRPC_1.4.4 1.4.4
+ xdr_u_longlong_t@NTIRPC_1.4.4 1.4.4
+ xdr_u_short@NTIRPC_1.4.4 1.4.4
+ xdr_uint32_t@NTIRPC_1.4.4 1.4.4
+ xdr_uint64_t@NTIRPC_1.4.4 1.4.4
+ xdr_union@NTIRPC_1.4.4 1.4.4
+ xdr_vector@NTIRPC_1.4.4 1.4.4
+ xdr_void@NTIRPC_1.4.4 1.4.4
+ xdr_wrapstring@NTIRPC_1.4.4 1.4.4
+ xdrmem_ncreate@NTIRPC_1.4.4 1.4.4
+ xdrrec_create@NTIRPC_1.4.4 1.4.4
+ xdrrec_endofrecord@NTIRPC_1.4.4 1.4.4
+ xdrrec_eof@NTIRPC_1.4.4 1.4.4
+ xdrrec_skiprecord@NTIRPC_1.4.4 1.4.4
+ xdrstdio_create@NTIRPC_1.4.4 1.4.4
+ xprt_register@NTIRPC_1.4.4 1.4.4
+ xprt_unregister@NTIRPC_1.4.4 1.4.4
diff -Nru ntirpc-1.4.3/ntirpc/rpc/xdr_inline.h ntirpc-1.4.4/ntirpc/rpc/xdr_inline.h
--- ntirpc-1.4.3/ntirpc/rpc/xdr_inline.h	2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/ntirpc/rpc/xdr_inline.h	2017-05-05 21:07:02.000000000 +0200
@@ -56,7 +56,7 @@
  */
 #define XDR_FALSE ((long) 0)
 #define XDR_TRUE ((long) 1)
-#define LASTUNSIGNED ((u_int) 0-1)
+#define RPC_MAXDATASIZE 9000
 
 /*
  * Free a data structure using XDR
@@ -544,6 +544,7 @@
 {
 	char *sp = *cpp;	/* sp is the actual string pointer */
 	u_int nodesize;
+	bool ret;
 
 	/*
 	 * first deal with the length since xdr bytes are counted
@@ -564,7 +565,12 @@
 			return (true);
 		if (sp == NULL)
 			*cpp = sp = (char *)mem_alloc(nodesize);
-		return (inline_xdr_getopaque(xdrs, sp, nodesize));
+		ret = inline_xdr_getopaque(xdrs, sp, nodesize);
+		if (! ret) {
+			free(sp);
+			*cpp = NULL;
+		}
+		return (ret);
 
 	case XDR_ENCODE:
 		return (inline_xdr_putopaque(xdrs, sp, nodesize));
@@ -653,6 +659,7 @@
 	char *sp = *cpp;	/* sp is the actual string pointer */
 	u_int size = 0;		/* XXX remove warning */
 	u_int nodesize;
+	bool ret;
 
 	/*
 	 * first deal with the length since xdr strings are counted-strings
@@ -691,8 +698,13 @@
 	case XDR_DECODE:
 		if (sp == NULL)
 			*cpp = sp = (char *)mem_alloc(nodesize);
-		sp[size] = 0;
-		return (inline_xdr_getopaque(xdrs, sp, size));
+		ret = inline_xdr_getopaque(xdrs, sp, size);
+		if (! ret) {
+			free(sp);
+			*cpp = NULL;
+		} else
+			sp[size] = 0;
+		return (ret);
 
 	case XDR_ENCODE:
 		return (inline_xdr_putopaque(xdrs, sp, size));
@@ -713,7 +725,7 @@
 static inline bool
 inline_xdr_wrapstring(XDR *xdrs, char **cpp)
 {
-	return inline_xdr_string(xdrs, cpp, LASTUNSIGNED);
+	return inline_xdr_string(xdrs, cpp, RPC_MAXDATASIZE);
 }
 
 /*
diff -Nru ntirpc-1.4.3/src/rpcb_st_xdr.c ntirpc-1.4.4/src/rpcb_st_xdr.c
--- ntirpc-1.4.3/src/rpcb_st_xdr.c	2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/src/rpcb_st_xdr.c	2017-05-05 21:07:02.000000000 +0200
@@ -39,6 +39,8 @@
 #include <sys/cdefs.h>
 
 #include <rpc/rpc.h>
+#include <rpc/xdr.h>
+#include <rpc/xdr_inline.h>
 
 /* Link list of all the stats about getport and getaddr */
 
@@ -53,7 +55,7 @@
 		return (false);
 	if (!xdr_int(xdrs, &objp->failure))
 		return (false);
-	if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+	if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
 		return (false);
 	if (!xdr_pointer
 	    (xdrs, (char **)&objp->next, sizeof(rpcbs_addrlist),
@@ -93,7 +95,7 @@
 			IXDR_PUT_INT32(buf, objp->failure);
 			IXDR_PUT_INT32(buf, objp->indirect);
 		}
-		if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+		if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
 			return (false);
 		if (!xdr_pointer
 		    (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist),
@@ -123,7 +125,7 @@
 			objp->failure = (int)IXDR_GET_INT32(buf);
 			objp->indirect = (int)IXDR_GET_INT32(buf);
 		}
-		if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+		if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
 			return (false);
 		if (!xdr_pointer
 		    (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist),
@@ -143,7 +145,7 @@
 		return (false);
 	if (!xdr_int(xdrs, &objp->indirect))
 		return (false);
-	if (!xdr_string(xdrs, &objp->netid, (u_int) ~0))
+	if (!xdr_string(xdrs, &objp->netid, RPC_MAXDATASIZE))
 		return (false);
 	if (!xdr_pointer
 	    (xdrs, (char **)&objp->next, sizeof(rpcbs_rmtcalllist),
diff -Nru ntirpc-1.4.3/src/rpc_generic.c ntirpc-1.4.4/src/rpc_generic.c
--- ntirpc-1.4.3/src/rpc_generic.c	2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/src/rpc_generic.c	2017-05-05 21:07:02.000000000 +0200
@@ -747,6 +747,8 @@
 
 	switch (af) {
 	case AF_INET:
+		if (nbuf->len < sizeof(*sin))
+			return NULL;
 		sin = nbuf->buf;
 		if (inet_ntop(af, &sin->sin_addr, namebuf, sizeof(namebuf))
 		    == NULL)
@@ -761,6 +763,8 @@
 		break;
 #ifdef INET6
 	case AF_INET6:
+		if (nbuf->len < sizeof(*sin6))
+			return NULL;
 		sin6 = nbuf->buf;
 		if (inet_ntop(af, &sin6->sin6_addr, namebuf6, sizeof(namebuf6))
 		    == NULL) {
@@ -827,6 +831,8 @@
 
 	port = 0;
 	sin = NULL;
+	if (uaddr == NULL)
+		return NULL;
 	addrstr = mem_strdup(uaddr);
 
 	/*
diff -Nru ntirpc-1.4.3/src/xdr.c ntirpc-1.4.4/src/xdr.c
--- ntirpc-1.4.3/src/xdr.c	2016-10-25 20:15:56.000000000 +0200
+++ ntirpc-1.4.4/src/xdr.c	2017-05-05 21:07:02.000000000 +0200
@@ -56,7 +56,7 @@
  */
 #define XDR_FALSE ((long) 0)
 #define XDR_TRUE ((long) 1)
-#define LASTUNSIGNED ((u_int) 0-1)
+#define RPC_MAXDATASIZE 9000
 
 /*
  * for unit alignment
@@ -504,6 +504,7 @@
 {
 	char *sp = *cpp;	/* sp is the actual string pointer */
 	u_int nodesize;
+	bool ret, allocated = false;
 
 	/*
 	 * first deal with the length since xdr bytes are counted
@@ -523,12 +524,21 @@
 	case XDR_DECODE:
 		if (nodesize == 0)
 			return (true);
-		if (sp == NULL)
+		if (sp == NULL) {
 			*cpp = sp = mem_alloc(nodesize);
+			allocated = true;
+		}
 		/* FALLTHROUGH */
 
 	case XDR_ENCODE:
-		return (xdr_opaque(xdrs, sp, nodesize));
+		ret = xdr_opaque(xdrs, sp, nodesize);
+		if ((xdrs->x_op == XDR_DECODE) && (ret == false)) {
+			if (allocated) {
+				free(sp);
+				*cpp = NULL;
+			}
+		}
+		return (ret);
 
 	case XDR_FREE:
 		if (sp != NULL) {
@@ -611,6 +621,7 @@
 	char *sp = *cpp;	/* sp is the actual string pointer */
 	u_int size = 0;
 	u_int nodesize;
+	bool ret, allocated = false;
 
 	/*
 	 * first deal with the length since xdr strings are counted-strings
@@ -647,13 +658,22 @@
 	switch (xdrs->x_op) {
 
 	case XDR_DECODE:
-		if (sp == NULL)
+		if (sp == NULL) {
 			*cpp = sp = mem_alloc(nodesize);
+			allocated = true;
+		}
 		sp[size] = 0;
 		/* FALLTHROUGH */
 
 	case XDR_ENCODE:
-		return (xdr_opaque(xdrs, sp, size));
+		ret = xdr_opaque(xdrs, sp, size);
+		if ((xdrs->x_op == XDR_DECODE) && (ret == false)) {
+			if (allocated) {
+				free(sp);
+				*cpp = NULL;
+			}
+		}
+		return (ret);
 
 	case XDR_FREE:
 		mem_free(sp, nodesize);
@@ -671,7 +691,7 @@
 bool
 xdr_wrapstring(XDR *xdrs, char **cpp)
 {
-	return xdr_string(xdrs, cpp, LASTUNSIGNED);
+	return xdr_string(xdrs, cpp, RPC_MAXDATASIZE);
 }
 
 /*
begin:vcard
fn:Christoph Martin
n:Martin;Christoph
org;quoted-printable;quoted-printable:Johannes Gutenberg-Universit=C3=A4t Mainz;Zentrum f=C3=BCr Datenverarbeitung
adr:;;Anselm Franz von Bentzel-Weg 12;Mainz;Rheinland-Pfalz;55128;Germany
email;internet:martin@uni-mainz.de
title:Leiter Unix-Systeme
tel;work:+49-6131-3926337
tel;fax:+49-6131-3926407
tel;cell:+49-179-7952652
x-mozilla-html:FALSE
version:2.1
end:vcard

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Christoph Martin:
> Package: release.debian.org
> Severity: important
> User: release.debian.org@packages.debian.org
> Usertags: unblock
> 
> Please unblock package ntirpc
> 
> Hi,
> 
> ntirpc/1.4.4-1, which was uploaded some days ago to unstable fixes
> release critical CVE-2017-8779 bug #861836.
> 
> Thanks
> 
> Christoph
> 

Unblocked, thanks.

For future uploads, please avoid updating the versions on all symbols in
the symbols files when they haven't changed (as it causes an unnecessary
strict dependency from reverse dependencies and unnecessary changes for
us to review)

Thanks,
~Niels

--- End Message ---

Reply to: