Bill Paul a9352e90f0 Patch RPC library to avoid possible denial of service attacks as described ... recently in BUGTRAQ. The set_input_fragment() routine in the XDR record marking code blindly trusts that the first two bytes it sees will in fact be an actual record header and that the specified size will be sane. In fact, if you just telnet to a listening port of an RPC service and send a few carriage returns, set_input_fragment() will obtain a ridiculously large record size and sit there for a long time trying to read from the network. A sanity test is required: if the record size is larger than the receive buffer, punt.		1998-05-15 22:57:31 +00:00
..
Makefile.inc	Removed the subdirectory paths from the definitions of MAN[1-9]. They	1997-10-15 16:16:41 +00:00
xdr_array.c	Resolve conflicts.	1997-05-28 04:57:39 +00:00
xdr_float.c	Resolve conflicts.	1997-05-28 04:57:39 +00:00
xdr_mem.c	Resolve conflicts.	1997-05-28 04:57:39 +00:00
xdr_rec.c	Patch RPC library to avoid possible denial of service attacks as described	1998-05-15 22:57:31 +00:00
xdr_reference.c	Resolve conflicts.	1997-05-28 04:57:39 +00:00
xdr_sizeof.c	Cast a pointer to a long, not an int and make the arg passed to the function	1998-05-11 09:10:38 +00:00
xdr_stdio.c	Resolve conflicts.	1997-05-28 04:57:39 +00:00
xdr.3	Resolve conflicts.	1997-05-28 04:57:39 +00:00
xdr.c	Resolve conflicts.	1997-05-28 04:57:39 +00:00