Blame SOURCES/rpcbind-0.2.0-rpcinfo-buf-overflow.patch
|
 |
3da827 |
diff -up rpcbind-0.2.0/src/rpcinfo.c.orig rpcbind-0.2.0/src/rpcinfo.c
|
|
|
3da827 |
--- rpcbind-0.2.0/src/rpcinfo.c.orig 2009-05-29 09:38:22.000000000 -0400
|
|
|
3da827 |
+++ rpcbind-0.2.0/src/rpcinfo.c 2019-01-22 11:43:16.000000000 -0500
|
|
|
3da827 |
@@ -984,6 +984,7 @@ rpcbdump (dumptype, netid, argc, argv)
|
|
|
3da827 |
(" program version(s) netid(s) service owner\n");
|
|
|
3da827 |
for (rs = rs_head; rs; rs = rs->next)
|
|
|
3da827 |
{
|
|
|
3da827 |
+ size_t netidmax = sizeof(buf) - 1;
|
|
|
3da827 |
char *p = buf;
|
|
|
3da827 |
|
|
|
3da827 |
printf ("%10ld ", rs->prog);
|
|
|
3da827 |
@@ -996,12 +997,22 @@ rpcbdump (dumptype, netid, argc, argv)
|
|
|
3da827 |
}
|
|
|
3da827 |
printf ("%-10s", buf);
|
|
|
3da827 |
buf[0] = '\0';
|
|
|
3da827 |
- for (nl = rs->nlist; nl; nl = nl->next)
|
|
|
3da827 |
- {
|
|
|
3da827 |
- strcat (buf, nl->netid);
|
|
|
3da827 |
- if (nl->next)
|
|
|
3da827 |
- strcat (buf, ",");
|
|
|
3da827 |
- }
|
|
|
3da827 |
+
|
|
|
3da827 |
+ for (nl = rs->nlist; nl; nl = nl->next)
|
|
|
3da827 |
+ {
|
|
|
3da827 |
+ strncat (buf, nl->netid, netidmax);
|
|
|
3da827 |
+ if (strlen (nl->netid) < netidmax)
|
|
|
3da827 |
+ netidmax -= strlen(nl->netid);
|
|
|
3da827 |
+ else
|
|
|
3da827 |
+ break;
|
|
|
3da827 |
+
|
|
|
3da827 |
+ if (nl->next && netidmax > 1)
|
|
|
3da827 |
+ {
|
|
|
3da827 |
+ strncat (buf, ",", netidmax);
|
|
|
3da827 |
+ netidmax --;
|
|
|
3da827 |
+ }
|
|
|
3da827 |
+ }
|
|
|
3da827 |
+
|
|
|
3da827 |
printf ("%-32s", buf);
|
|
|
3da827 |
rpc = getrpcbynumber (rs->prog);
|
|
|
3da827 |
if (rpc)
|