]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/commit
MFstable/10 r302453:
authorngie <ngie@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Fri, 8 Jul 2016 20:40:50 +0000 (20:40 +0000)
committerngie <ngie@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Fri, 8 Jul 2016 20:40:50 +0000 (20:40 +0000)
commit3fa8fa52bed336f0e08b1d59ac584ac9e1974c6c
tree82da2a9e92a5d2e01fb8b1878d4778ae9134bcfb
parent28c1f773bcb289a98860cb6b31f36c0e34a8a5cd
MFstable/10 r302453:

MFC r301605:

Bounds check rpcbs_rmtcall(..) to ensure rtype is less than RPCBVERS_STAT

Not returning if rtype == RPCBVERS_STAT will cause us to overrun the inf array, as
it's defined to be exactly RPCBVERS_STAT elements in rpcb_prot.x:

> include/rpc/rpcb_prot.x:typedef rpcb_stat rpcb_stat_byvers[RPCBVERS_STAT];

The proposed change also matches the rest of the rtype upper bound checks in the
file, so the original change was likely a typo.

CID: 1007567

git-svn-id: svn://svn.freebsd.org/base/stable/9@302454 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
usr.sbin/rpcbind/rpcb_stat.c