FreeBSD Bugzilla – Attachment 13378 Details for
Bug 25503
readudp() in libstand(3) can return incorrect packet lengths
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
file.diff
file.diff (text/plain), 823 bytes, created by
jbrowne
on 2001-03-03 01:20:01 UTC
(
hide
)
Description:
file.diff
Filename:
MIME Type:
Creator:
jbrowne
Created:
2001-03-03 01:20:01 UTC
Size:
823 bytes
patch
obsolete
>*** /usr/src/lib/libstand/tftp.c Thu May 4 06:47:52 2000 >--- /tmp/tftp.c Fri Mar 2 17:06:03 2001 >*************** recvtftp(d, pkt, len, tleft) >*** 120,124 **** > len = readudp(d, pkt, len, tleft); > >! if (len < 8) > return (-1); > >--- 120,124 ---- > len = readudp(d, pkt, len, tleft); > >! if (len < 4) > return (-1); > >bash-2.04$ diff -c2p /usr/src/lib/libstand/udp.c /tmp/udp.c >*** /usr/src/lib/libstand/udp.c Fri Apr 14 20:09:29 2000 >--- /tmp/udp.c Fri Mar 2 17:06:29 2001 >*************** readudp(d, pkt, len, tleft) >*** 268,272 **** > } > >! n -= sizeof(*ip) + sizeof(*uh); > return (n); > } >--- 268,272 ---- > } > >! n = n > (ntohs(uh->uh_ulen) - sizeof(*uh)) ? ntohs(uh->uh_ulen) - sizeof(*uh) : n; > return (n); > }
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=13378">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 25503
: 13378