linux/poky.git/meta/recipes-extended/rpcbind, branch uninative-1.8

rpcbind: Stop freeing a static pointer

2018-01-14T09:11:57+00:00

commit 7ea36ee introduced a svc_freeargs() call that ended up freeing static pointer. It turns out the allocations for the rmt_args is not necessary . The xdr routines (xdr_bytes) will handle the memory management and the largest possible message size is UDPMSGSIZE (due to UDP only) which is smaller than RPC_BUF_MAX (From OE-Core rev: 1d78875de924d794130c86b27ed516a1df40a59d) Signed-off-by: Jackie Huang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: fix assertion failure

2018-01-14T09:11:57+00:00

Backport a patch to fix the assertion failure: rpcbind: ../../libtirpc-1.0.2/src/pmap_prot.c:50: xdr_pmap: Assertion `regs != NULL' failed. (From OE-Core rev: b09202848d713af4eef179a443745b413542eaf0) Signed-off-by: Jackie Huang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Fix CVE-2017-8779

2017-05-25T22:59:32+00:00

This vulnerability is also called "rpcbomb". Backport upstream patch to fix this vulnerability. CVE: CVE-2017-8779 (From OE-Core rev: 7936c9451eb4c376a78a0ac7461d1b2430c7f1f3) Signed-off-by: Fan Xin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Remove uneeded patches

2017-05-11T15:59:18+00:00

We were carrying patches which are no longer needed when building rpcbind for musl (From OE-Core rev: 56b3b440fa139c8f132b2b71dc6b8eb0ee974e7a) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

recipes: Make use of the new bb.utils.filter() function

2017-03-01T11:17:45+00:00

(From OE-Core rev: 0a1427bf9aeeda6bee2cc0af8da4ea5fd90aef6f) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

rpcbind: 0.2.3 -> 0.2.4

2017-02-16T04:06:42+00:00

Drop obsolete patch - 0001-Avoid-use-of-glibc-sys-cdefs.h-header.patch Drop backport patches: - 0001-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch - cve-2015-7236.patch (From OE-Core rev: 6d65a58f5c062b503ab41b38fb2e74df71a9a8c6) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

Add "CVE:" tag to current patches in OE-core

2016-01-11T23:26:32+00:00

The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. (From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669) Signed-off-by: Mariano Lopez Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Fix build with libtirpc 1.0.1

2015-12-28T09:25:18+00:00

libtirpc 1.0.1 uses the SVC_XP_AUTH macro to access xp_auth. Update rpcbind to follow the same way. (From OE-Core rev: 53176113f7c149279af5b30dd5b48d2fe5fdea07) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Security Advisory - rpcbind - CVE-2015-7236

2015-12-01T21:32:06+00:00

rpcbind: Fix memory corruption in PMAP_CALLIT code Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code. The patch comes from , and it hasn't been in rpcbind upstream yet. (From OE-Core rev: cc4f62f3627f3804907e8ff9c68d9321979df32b) Signed-off-by: Li Zhou Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: don't use '-w' for starting rpcbind

2015-11-25T07:50:32+00:00

While runing: $ systemctl restart rpcbind $ systemctl status rpcbind There are errors like below: rpcbind[1722]: Cannot open '/tmp/rpcbind.xdr' file for reading, \ errno 2 (No such file or directory) rpcbind[1722]: Cannot open '/tmp/portmap.xdr' file for reading, \ errno 2 (No such file or directory) '-w' causes rpcbind to do a "warm start" by read a state file when rpcbind starts up. The state file is created when rpcbind terminates. The state file is not always there, the patch refers to: https://bugs.launchpad.net/ubuntu/+source/rpcbind/+bug/835833 (From OE-Core rev: 3d32a8a1fd90ca68b0d74d86165c8f3668faedcd) Signed-off-by: Li Wang Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie