[Bug network/20964] sunrpc: Stack-based buffer overflow in getrpcport with RES_USE_INET6

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=20964

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
            Version|unspecified                 |2.25
         Resolution|---                         |FIXED
           Assignee|unassigned at sourceware dot org   |fweimer at redhat dot com
              Flags|security+                   |security-

--- Comment #3 from Florian Weimer <fweimer at redhat dot com> ---
Fixed for 2.25.

sunrpc/rpcinfo.c was already dead code.

I'm clearing the security+ flag because RES_OPTIONS is protected by
UNSECURE_ENVVARS.

-- 
You are receiving this mail because:
You are on the CC list for the bug.