about summary refs log tree commit diff
path: root/nixpkgs/pkgs/servers/monitoring/net-snmp/CVE-2018-18065.patch
blob: c33f7bb03fa83b08c33d0e6779bfa3996dedd7e8 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
commit 7ffb8e25a0db851953155de91f0170e9bf8c457d
Author: Robert Story <rstory@freesnmp.com>
Date:   Thu Oct 6 10:43:10 2016 -0400

    CHANGES: BUG: 2743: snmpd crashes when receiving a GetNext PDU with multiple Varbinds
    
    skip out-of-range varbinds when calling next handler

diff --git a/agent/helpers/table.c b/agent/helpers/table.c
index 32a08033a..2666638b5 100644
--- a/agent/helpers/table.c
+++ b/agent/helpers/table.c
@@ -340,6 +340,8 @@ table_helper_handler(netsnmp_mib_handler *handler,
             else if (reqinfo->mode == MODE_GET)
                 table_helper_cleanup(reqinfo, request,
                                      SNMP_NOSUCHOBJECT);
+            else
+                request->processed = 1; /* skip if next handler called */
             continue;
         }
 
@@ -409,6 +411,8 @@ table_helper_handler(netsnmp_mib_handler *handler,
                 else if (reqinfo->mode == MODE_GET)
                     table_helper_cleanup(reqinfo, request,
                                          SNMP_NOSUCHOBJECT);
+                else
+                    request->processed = 1; /* skip if next handler called */
                 continue;
             }
             /*