File 0033-fix-remote-rpcbind-denial-of-service-vulnerability.patch of Package rpcbind.4752

Index: rpcbind-0.2.1_rc4/src/rpcb_svc_com.c
===================================================================
--- rpcbind-0.2.1_rc4.orig/src/rpcb_svc_com.c
+++ rpcbind-0.2.1_rc4/src/rpcb_svc_com.c
@@ -46,6 +46,7 @@
 #include <bits/poll.h>
 #include <sys/socket.h>
 #include <rpc/rpc.h>
+#include <rpc/rpc_com.h>
 #include <rpc/rpcb_prot.h>
 #include <rpc/svc_dg.h>
 #include <netconfig.h>
@@ -430,7 +431,7 @@ rpcbproc_taddr2uaddr_com(void *arg, stru
 static bool_t
 xdr_encap_parms(XDR *xdrs, struct encap_parms *epp)
 {
-	return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0));
+        return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE));
 }
 
 /*
openSUSE Build Service is sponsored by