aboutsummaryrefslogtreecommitdiff
path: root/website/static/security/patches/SA-02:36/nfs.patch
blob: b118eb07197fae14e4c371b8f9bfbf45b5030b0a (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
--- sys/nfs/nfs_socket.c	Thu Apr 25 19:46:07 2002
+++ sys/nfs/nfs_socket.c	Thu Aug  1 14:31:55 2002
@@ -2154,7 +2154,7 @@
 	register struct mbuf *m, **mpp;
 	register char *cp1, *cp2;
 	register int len;
-	struct mbuf *om, *m2, *recm = NULL;
+	struct mbuf *om, *m2, *recm;
 	u_int32_t recmark;
 
 	if (slp->ns_flag & SLP_GETSTREAM)
@@ -2199,7 +2199,11 @@
 
 	    /*
 	     * Now get the record part.
+	     *
+	     * Note that slp->ns_reclen may be 0.  Linux sometimes
+	     * generates 0-length RPCs
 	     */
+	    recm = NULL;
 	    if (slp->ns_cc == slp->ns_reclen) {
 		recm = slp->ns_raw;
 		slp->ns_raw = slp->ns_rawend = (struct mbuf *)0;