Add FreeBSD DoS patch.

diff --git a/sunrpc/svc_tcp.c b/sunrpc/svc_tcp.c
index 278e16fc33aa6d009bc647218aca5150ac1396e3..627841fff8a337fbd12b24892c7e1107855b3741 100644 (file)
--- a/sunrpc/svc_tcp.c
+++ b/sunrpc/svc_tcp.c
@@ -378,6 +378,7 @@ svctcp_recv(xprt, msg)
                cd->x_id = msg->rm_xid;
                return (TRUE);
        }
+       cd->strm_stat = XPRT_DIED;      /* XXXX */
        return (FALSE);
 }
 

diff --git a/sunrpc/xdr_rec.c b/sunrpc/xdr_rec.c
index 6b33208d76a9df29d8e58acc8da23c271ee7d3d3..b7d5388d2242bdfa3581b9490fc09c7995d42b16 100644 (file)
--- a/sunrpc/xdr_rec.c
+++ b/sunrpc/xdr_rec.c
@@ -548,6 +548,12 @@ set_input_fragment(rstrm)
                return FALSE;
        header = ntohl(header);
        rstrm->last_frag = ((header & LAST_FRAG) == 0) ? FALSE : TRUE;
+       /*
+        * Sanity check. Try not to accept wildly incorrect
+        * record sizes.
+        */
+       if ((header & (~LAST_FRAG)) > rstrm->recvsize)
+         return(FALSE);
        rstrm->fbtbc = header & ~LAST_FRAG;
        return TRUE;
 }