linux/poky.git/meta/recipes-extended/rpcbind, branch uninative-2.1

rpcbind: refresh patches

2018-03-11T13:27:01+00:00

The patch tool will apply patches by default with "fuzz", which is where if the hunk context isn't present but what is there is close enough, it will force the patch in. Whilst this is useful when there's just whitespace changes, when applied to source it is possible for a patch applied with fuzz to produce broken code which still compiles (see #10450). This is obviously bad. We'd like to eventually have do_patch() rejecting any fuzz on these grounds. For that to be realistic the existing patches with fuzz need to be rebased and reviewed. (From OE-Core rev: df9b991d1f453aae4dca5558f10fd23e866778dc) Signed-off-by: Ross Burton Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Stop freeing a static pointer

2018-01-14T09:11:57+00:00

commit 7ea36ee introduced a svc_freeargs() call that ended up freeing static pointer. It turns out the allocations for the rmt_args is not necessary . The xdr routines (xdr_bytes) will handle the memory management and the largest possible message size is UDPMSGSIZE (due to UDP only) which is smaller than RPC_BUF_MAX (From OE-Core rev: 1d78875de924d794130c86b27ed516a1df40a59d) Signed-off-by: Jackie Huang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: fix assertion failure

2018-01-14T09:11:57+00:00

Backport a patch to fix the assertion failure: rpcbind: ../../libtirpc-1.0.2/src/pmap_prot.c:50: xdr_pmap: Assertion `regs != NULL' failed. (From OE-Core rev: b09202848d713af4eef179a443745b413542eaf0) Signed-off-by: Jackie Huang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Fix CVE-2017-8779

2017-05-25T22:59:32+00:00

This vulnerability is also called "rpcbomb". Backport upstream patch to fix this vulnerability. CVE: CVE-2017-8779 (From OE-Core rev: 7936c9451eb4c376a78a0ac7461d1b2430c7f1f3) Signed-off-by: Fan Xin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Remove uneeded patches

2017-05-11T15:59:18+00:00

We were carrying patches which are no longer needed when building rpcbind for musl (From OE-Core rev: 56b3b440fa139c8f132b2b71dc6b8eb0ee974e7a) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

recipes: Make use of the new bb.utils.filter() function

2017-03-01T11:17:45+00:00

(From OE-Core rev: 0a1427bf9aeeda6bee2cc0af8da4ea5fd90aef6f) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

rpcbind: 0.2.3 -> 0.2.4

2017-02-16T04:06:42+00:00

Drop obsolete patch - 0001-Avoid-use-of-glibc-sys-cdefs.h-header.patch Drop backport patches: - 0001-handle_reply-Don-t-use-the-xp_auth-pointer-directly.patch - cve-2015-7236.patch (From OE-Core rev: 6d65a58f5c062b503ab41b38fb2e74df71a9a8c6) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

Add "CVE:" tag to current patches in OE-core

2016-01-11T23:26:32+00:00

The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. (From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669) Signed-off-by: Mariano Lopez Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Fix build with libtirpc 1.0.1

2015-12-28T09:25:18+00:00

libtirpc 1.0.1 uses the SVC_XP_AUTH macro to access xp_auth. Update rpcbind to follow the same way. (From OE-Core rev: 53176113f7c149279af5b30dd5b48d2fe5fdea07) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

rpcbind: Security Advisory - rpcbind - CVE-2015-7236

2015-12-01T21:32:06+00:00

rpcbind: Fix memory corruption in PMAP_CALLIT code Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code. The patch comes from , and it hasn't been in rpcbind upstream yet. (From OE-Core rev: cc4f62f3627f3804907e8ff9c68d9321979df32b) Signed-off-by: Li Zhou Signed-off-by: Wenzong Fan Signed-off-by: Ross Burton Signed-off-by: Richard Purdie