<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/lib/libc/rpc, branch release/11.1.0</title>
<subtitle>FreeBSD source tree</subtitle>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/'/>
<entry>
<title>MFS r320581: MFC r320494: Fix double free by reverting r300385 and</title>
<updated>2017-07-03T04:25:28+00:00</updated>
<author>
<name>Xin LI</name>
<email>delphij@FreeBSD.org</email>
</author>
<published>2017-07-03T04:25:28+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=57c4d2f04c9844fee48408a6f1b93036f61d2954'/>
<id>57c4d2f04c9844fee48408a6f1b93036f61d2954</id>
<content type='text'>
r300624 which was false positive reported by cppcheck.

Approved by:	re (kib)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
r300624 which was false positive reported by cppcheck.

Approved by:	re (kib)
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r320216: Fix use-after-free introduced in r300388.</title>
<updated>2017-06-25T17:42:27+00:00</updated>
<author>
<name>Xin LI</name>
<email>delphij@FreeBSD.org</email>
</author>
<published>2017-06-25T17:42:27+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=a705a1ffe2979d352c826f3d1b5d89ac452e2b1f'/>
<id>a705a1ffe2979d352c826f3d1b5d89ac452e2b1f</id>
<content type='text'>
In r300388, endnetconfig() was called on nc_handle which would release
the associated netconfig structure, which means tmpnconf-&gt;nc_netid
would be a use-after-free.

Solve this by doing endnetconfig() in return paths instead.

Reported by:	jemalloc via kevlo
Reviewed by:	cem, ngie (earlier version)
Approved by:	re (kib)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In r300388, endnetconfig() was called on nc_handle which would release
the associated netconfig structure, which means tmpnconf-&gt;nc_netid
would be a use-after-free.

Solve this by doing endnetconfig() in return paths instead.

Reported by:	jemalloc via kevlo
Reviewed by:	cem, ngie (earlier version)
Approved by:	re (kib)
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r319369:</title>
<updated>2017-06-06T07:21:33+00:00</updated>
<author>
<name>Xin LI</name>
<email>delphij@FreeBSD.org</email>
</author>
<published>2017-06-06T07:21:33+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=539882b22ffef9f062cb66d8f17995a16621d659'/>
<id>539882b22ffef9f062cb66d8f17995a16621d659</id>
<content type='text'>
 * limit size of buffers to RPC_MAXDATASIZE
 * don't leak memory
 * be more picky about bad parameters

From:

https://raw.githubusercontent.com/guidovranken/rpcbomb/master/libtirpc_patch.txt
https://github.com/guidovranken/rpcbomb/blob/master/rpcbind_patch.txt

via NetBSD.

Approved by:	re (kib)
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
 * limit size of buffers to RPC_MAXDATASIZE
 * don't leak memory
 * be more picky about bad parameters

From:

https://raw.githubusercontent.com/guidovranken/rpcbomb/master/libtirpc_patch.txt
https://github.com/guidovranken/rpcbomb/blob/master/rpcbind_patch.txt

via NetBSD.

Approved by:	re (kib)
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r317660, r317710</title>
<updated>2017-05-15T22:41:01+00:00</updated>
<author>
<name>Brooks Davis</name>
<email>brooks@FreeBSD.org</email>
</author>
<published>2017-05-15T22:41:01+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=ec827fb220e9bf4a5f7a938ac8e33a49521060ef'/>
<id>ec827fb220e9bf4a5f7a938ac8e33a49521060ef</id>
<content type='text'>
r317660:
Support clnt_raw's use of FD_SETSIZE as a fake file descriptor.

Accomplish this by allocating space for it in __svc_xports and allowing
it to be registered.  The failure to allocate space was causing an
out-of-bounds read in svc_getreq_common().  The failure to register
caused PR 211804.

The bug was found with CHERI bounds checking.

PR:		211804
Obtained from:	CheriBSD
Sponsored by:	DARPA, AFRL
Reviewed by:	ngie
Differential Revision:	https://reviews.freebsd.org/D10528

r317710:
Remove expected failure now that it was fixed in r317660.

PR:		211804
Reviewed by:	ngie
Obtained from:	CheriBSD
Sponsored by:	DARPA, AFRL
Differential Revision:	https://reviews.freebsd.org/D10576
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
r317660:
Support clnt_raw's use of FD_SETSIZE as a fake file descriptor.

Accomplish this by allocating space for it in __svc_xports and allowing
it to be registered.  The failure to allocate space was causing an
out-of-bounds read in svc_getreq_common().  The failure to register
caused PR 211804.

The bug was found with CHERI bounds checking.

PR:		211804
Obtained from:	CheriBSD
Sponsored by:	DARPA, AFRL
Reviewed by:	ngie
Differential Revision:	https://reviews.freebsd.org/D10528

r317710:
Remove expected failure now that it was fixed in r317660.

PR:		211804
Reviewed by:	ngie
Obtained from:	CheriBSD
Sponsored by:	DARPA, AFRL
Differential Revision:	https://reviews.freebsd.org/D10576
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r315162:</title>
<updated>2017-04-07T16:08:04+00:00</updated>
<author>
<name>Pedro F. Giffuni</name>
<email>pfg@FreeBSD.org</email>
</author>
<published>2017-04-07T16:08:04+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=919f2be423d6d44281f3ae38f91855c6a5e405bd'/>
<id>919f2be423d6d44281f3ae38f91855c6a5e405bd</id>
<content type='text'>
libc: provide some bounds-checking through reallocarray(3).

reallocarray(3) is a non portable extension that originated in OpenBSD.
Given that it is already in FreeBSD's libc it is useful for the cases
where reallocation involves a multiplication.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
libc: provide some bounds-checking through reallocarray(3).

reallocarray(3) is a non portable extension that originated in OpenBSD.
Given that it is already in FreeBSD's libc it is useful for the cases
where reallocation involves a multiplication.
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC r303889:</title>
<updated>2016-09-08T15:12:20+00:00</updated>
<author>
<name>Pedro F. Giffuni</name>
<email>pfg@FreeBSD.org</email>
</author>
<published>2016-09-08T15:12:20+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=b11f21c6417abcc3bb57b655ebb54db89e844123'/>
<id>b11f21c6417abcc3bb57b655ebb54db89e844123</id>
<content type='text'>
libc/rpc: replace comma with semicolon when pertinent.

Uses of commas instead of a semicolons can easily go undetected. The comma
can serve as a statement separator but this shouldn't be abused when
statements are meant to be standalone.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
libc/rpc: replace comma with semicolon when pertinent.

Uses of commas instead of a semicolons can easily go undetected. The comma
can serve as a statement separator but this shouldn't be abused when
statements are meant to be standalone.
</pre>
</div>
</content>
</entry>
<entry>
<title>Use on crypto.x and rpc.x from the source tree.</title>
<updated>2016-06-28T19:53:16+00:00</updated>
<author>
<name>Bryan Drewery</name>
<email>bdrewery@FreeBSD.org</email>
</author>
<published>2016-06-28T19:53:16+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=77c7a2103639d39fc2c2639b754d3133a153acc0'/>
<id>77c7a2103639d39fc2c2639b754d3133a153acc0</id>
<content type='text'>
This fixes the build when DESTDIR may be blank or not yet populated.
It also fixes reproducibility.

Submitted by:	brooks
Approved by:	re (gjb)
Differential Revision:	https://reviews.freebsd.org/D6455
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This fixes the build when DESTDIR may be blank or not yet populated.
It also fixes reproducibility.

Submitted by:	brooks
Approved by:	re (gjb)
Differential Revision:	https://reviews.freebsd.org/D6455
</pre>
</div>
</content>
</entry>
<entry>
<title>libc/rpc: Make use of some xdr_* macros. (part 2)</title>
<updated>2016-06-09T22:18:25+00:00</updated>
<author>
<name>Pedro F. Giffuni</name>
<email>pfg@FreeBSD.org</email>
</author>
<published>2016-06-09T22:18:25+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=478eb9e9ca3dbdc67bd643268395888718e2d31e'/>
<id>478eb9e9ca3dbdc67bd643268395888718e2d31e</id>
<content type='text'>
xdr_rpcproc, xdr_rpcprog and xdr_rpcvers were broken in older
versions of FreeBSD but fixed in r296394.  Give them some use
hoping they help make the code somewhat more readable.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
xdr_rpcproc, xdr_rpcprog and xdr_rpcvers were broken in older
versions of FreeBSD but fixed in r296394.  Give them some use
hoping they help make the code somewhat more readable.
</pre>
</div>
</content>
</entry>
<entry>
<title>libc/rpc: Make use of some xdr_* macros.</title>
<updated>2016-06-09T19:44:47+00:00</updated>
<author>
<name>Pedro F. Giffuni</name>
<email>pfg@FreeBSD.org</email>
</author>
<published>2016-06-09T19:44:47+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=ea21823d9fd6944e0d97483e5dc252170f112fd2'/>
<id>ea21823d9fd6944e0d97483e5dc252170f112fd2</id>
<content type='text'>
xdr_rpcprog and xdr_rpcvers were broken in older versions of FreeBSD
but were fixed in r296394. Give them some use hoping they help make
the code somewhat more readable.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
xdr_rpcprog and xdr_rpcvers were broken in older versions of FreeBSD
but were fixed in r296394. Give them some use hoping they help make
the code somewhat more readable.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix the rpcb_getaddr() definition to match its declaration.</title>
<updated>2016-06-09T14:33:00+00:00</updated>
<author>
<name>Kevin Lo</name>
<email>kevlo@FreeBSD.org</email>
</author>
<published>2016-06-09T14:33:00+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=88609a6a7acb6b3773e74df5a6814036e34c3356'/>
<id>88609a6a7acb6b3773e74df5a6814036e34c3356</id>
<content type='text'>
Submitted by:	Sebastian Huber &lt;sebastian dot huber at embedded-brains dot de&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Submitted by:	Sebastian Huber &lt;sebastian dot huber at embedded-brains dot de&gt;
</pre>
</div>
</content>
</entry>
</feed>
