buildroot/package/rpcbind, branch 2018.02

rpcbind: Backport fixes to memory leak security fix

2018-01-18T21:08:39+00:00

Commit 954509f added a security fix for CVE-2017-8779, involving pairing all svc_getargs() calls with svc_freeargs() to avoid a memory leak. However it also introduced a couple of issues: - The call to svc_freeargs() from rpcbproc_callit_com() may result in an attempt to free static memory, resulting in undefined behaviour. - A typo in the svc_freeargs() call from pmapproc_dump() causes NIS (aka ypbind) to fail. Backport upstream fixes for these issues to version 0.2.3. Signed-off-by: Ed Blake Signed-off-by: Thomas Petazzoni

package/*/Config.in: fix help text check-package warnings

2017-12-18T08:22:54+00:00

This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni

package/rpcbind: Do not mark .service and .socket files executable

2017-08-24T21:12:40+00:00

Do not mark .service and .socket files executable, otherwise systemd will give us a warning about it. Signed-off-by: Andrey Smirnov Signed-off-by: Thomas Petazzoni

rpcbind: add upstream security fix for CVE-2017-8779

2017-05-16T07:24:01+00:00

CVE-2017-8779: rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb. For more details, see: https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/ Backport upstream fix to version 0.2.3 and unconditionally include syslog.h to fix a build issue when RPCBIND_DEBUG is disabled (which it is in Buildroot). Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

package/r*/Config.in: fix ordering of statements

2017-05-02T12:36:19+00:00

The check-package script when ran gives warnings on ordering issues on all of these Config files. This patch cleans up all warnings related to the ordering in the Config files for packages starting with the letter r in the package directory. The appropriate ordering is: type, default, depends on, select, help See http://nightly.buildroot.org/#_config_files for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

package: remove consecutive empty lines

2017-04-06T20:40:33+00:00

Occurrences were searched using [1]: check-package --include-only ConsecutiveEmptyLines $(find * -type f) and manually removed. [1] http://patchwork.ozlabs.org/patch/729666/ Signed-off-by: Ricardo Martincoski Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for BSD-3c

2017-04-01T13:26:57+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-3c is BSD-3-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-3c/BSD-3-Clause/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

package/rpcbind: fix musl build

2016-08-19T09:33:44+00:00

rpcbind uses the __P() macro defined in sys/cdefs.h but does not includes it explicitly, relying on the glibc behaviour to include it from its own headers. But this macro does nothing but expands as its argument. In the past, it did provide support for pre-ANSI compilers that did not support function prototypes. Those are now gone, and glibc provides this macro for legacy code. Patch out the use of __P() altogether. Fixes: http://autobuild.buildroot.org/results/346/346c5b562c244ddb039db2f86f71d670a01ed9ce/ http://autobuild.buildroot.org/results/d77/d77454265c45539178c008c5d92509c441447675/ and numerous such autobuild failures Signed-off-by: "Yann E. MORIN" Cc: Thomas Petazzoni Signed-off-by: Thomas Petazzoni

rpcbind: backport adjustment to changes in libtirpc 1.0.1

2015-11-25T11:10:26+00:00

Signed-off-by: Peter Rosin Signed-off-by: Thomas Petazzoni

blackfin: 2012R2 toolchain is gone, remove kludges

2015-10-04T15:11:32+00:00

Signed-off-by: Maxime Hadjinlian Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni