rpcb_prot.c File Reference

#include <wintirpc.h>
#include <rpc/rpc.h>
#include <rpc/types.h>
#include <rpc/xdr.h>
#include <rpc/rpcb_prot.h>

Include dependency graph for rpcb_prot.c:

Go to the source code of this file.

Functions
bool_t	xdr_rpcb (XDR *xdrs, RPCB *objp)
bool_t	xdr_rpcblist_ptr (XDR *xdrs, rpcblist_ptr *rp)
bool_t	xdr_rpcblist (XDR *xdrs, RPCBLIST **rp)
bool_t	xdr_rpcb_entry (XDR *xdrs, rpcb_entry *objp)
bool_t	xdr_rpcb_entry_list_ptr (XDR *xdrs, rpcb_entry_list_ptr *rp)
bool_t	xdr_rpcb_rmtcallargs (XDR *xdrs, struct rpcb_rmtcallargs *p)
bool_t	xdr_rpcb_rmtcallres (XDR *xdrs, struct rpcb_rmtcallres *p)
bool_t	xdr_netbuf (XDR *xdrs, struct netbuf *objp)

Function Documentation

xdr_netbuf()

bool_t xdr_netbuf	(	XDR *	xdrs,
		struct netbuf *	objp
	)

Definition at line 344 of file rpcb_prot.c.

{
    bool_t dummy;
 
    if (!xdr_u_int32_t(xdrs, (u_int32_t *) &objp->maxlen)) {
        return (FALSE);
    }
#ifdef __REACTOS__ // CVE-2017-8779
 
    if (objp->maxlen > RPC_MAXDATASIZE) {
        return (FALSE);
    }
 
#endif
    dummy = xdr_bytes(xdrs, (char **)&(objp->buf),
            (u_int *)&(objp->len), objp->maxlen);
    return (dummy);
}

Referenced by rpcb_taddr2uaddr(), and rpcb_uaddr2taddr().

xdr_rpcb()

bool_t xdr_rpcb	(	XDR *	xdrs,
		RPCB *	objp
	)

Definition at line 50 of file rpcb_prot.c.

{
    if (!xdr_u_int32_t(xdrs, &objp->r_prog)) {
        return (FALSE);
    }
    if (!xdr_u_int32_t(xdrs, &objp->r_vers)) {
        return (FALSE);
    }
#ifndef __REACTOS__ // CVE-2017-8779
    if (!xdr_string(xdrs, &objp->r_netid, (u_int)~0)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_addr, (u_int)~0)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_owner, (u_int)~0)) {
        return (FALSE);
    }
#else
    if (!xdr_string(xdrs, &objp->r_netid, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_addr, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_owner, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
#endif
    return (TRUE);
}

Referenced by __rpcb_findaddr_timed(), rpcb_set(), rpcb_unset(), and xdr_rpcblist_ptr().

xdr_rpcb_entry()

bool_t xdr_rpcb_entry	(	XDR *	xdrs,
		rpcb_entry *	objp
	)

Definition at line 174 of file rpcb_prot.c.

{
#ifndef __REACTOS__ // CVE-2017-8779
    if (!xdr_string(xdrs, &objp->r_maddr, (u_int)~0)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_nc_netid, (u_int)~0)) {
        return (FALSE);
    }
#else
    if (!xdr_string(xdrs, &objp->r_maddr, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_nc_netid, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
#endif
    if (!xdr_u_int32_t(xdrs, &objp->r_nc_semantics)) {
        return (FALSE);
    }
#ifndef __REACTOS__ // CVE-2017-8779
    if (!xdr_string(xdrs, &objp->r_nc_protofmly, (u_int)~0)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_nc_proto, (u_int)~0)) {
        return (FALSE);
    }
#else
    if (!xdr_string(xdrs, &objp->r_nc_protofmly, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
    if (!xdr_string(xdrs, &objp->r_nc_proto, RPC_MAXDATASIZE)) {
        return (FALSE);
    }
#endif
    return (TRUE);
}

xdr_rpcb_entry_list_ptr()

bool_t xdr_rpcb_entry_list_ptr	(	XDR *	xdrs,
		rpcb_entry_list_ptr *	rp
	)

Definition at line 215 of file rpcb_prot.c.

{
    /*
     * more_elements is pre-computed in case the direction is
     * XDR_ENCODE or XDR_FREE.  more_elements is overwritten by
     * xdr_bool when the direction is XDR_DECODE.
     */
    bool_t more_elements;
    int freeing = (xdrs->x_op == XDR_FREE);
    rpcb_entry_list_ptr next;
    rpcb_entry_list_ptr next_copy;
 
    next = NULL;
    for (;;) {
        more_elements = (bool_t)(*rp != NULL);
        if (! xdr_bool(xdrs, &more_elements)) {
            return (FALSE);
        }
        if (! more_elements) {
            return (TRUE);  /* we are done */
        }
        /*
         * the unfortunate side effect of non-recursion is that in
         * the case of freeing we must remember the next object
         * before we free the current object ...
         */
        if (freeing)
            next = (*rp)->rpcb_entry_next;
        if (! xdr_reference(xdrs, (caddr_t *)rp,
            (u_int)sizeof (rpcb_entry_list),
                    (xdrproc_t)xdr_rpcb_entry)) {
            return (FALSE);
        }
        if (freeing) {
            next_copy = next;
            rp = &next_copy;
            /*
             * Note that in the subsequent iteration, next_copy
             * gets nulled out by the xdr_reference
             * but next itself survives.
             */
        } else {
            rp = &((*rp)->rpcb_entry_next);
        }
    }
    /*NOTREACHED*/
}

xdr_rpcb_rmtcallargs()

bool_t xdr_rpcb_rmtcallargs	(	XDR *	xdrs,
		struct rpcb_rmtcallargs *	p
	)

Definition at line 270 of file rpcb_prot.c.

{
    struct r_rpcb_rmtcallargs *objp =
        (struct r_rpcb_rmtcallargs *)(void *)p;
    u_int lenposition, argposition, position;
    int32_t *buf;
 
    buf = XDR_INLINE(xdrs, 3 * BYTES_PER_XDR_UNIT);
    if (buf == NULL) {
        if (!xdr_u_int32_t(xdrs, &objp->prog)) {
            return (FALSE);
        }
        if (!xdr_u_int32_t(xdrs, &objp->vers)) {
            return (FALSE);
        }
        if (!xdr_u_int32_t(xdrs, &objp->proc)) {
            return (FALSE);
        }
    } else {
        IXDR_PUT_U_INT32(buf, objp->prog);
        IXDR_PUT_U_INT32(buf, objp->vers);
        IXDR_PUT_U_INT32(buf, objp->proc);
    }
 
    /*
     * All the jugglery for just getting the size of the arguments
     */
    lenposition = XDR_GETPOS(xdrs);
    if (! xdr_u_int(xdrs, &(objp->args.args_len))) {
        return (FALSE);
    }
    argposition = XDR_GETPOS(xdrs);
    if (! (*objp->xdr_args)(xdrs, objp->args.args_val)) {
        return (FALSE);
    }
    position = XDR_GETPOS(xdrs);
    objp->args.args_len = (u_int)((u_long)position - (u_long)argposition);
    XDR_SETPOS(xdrs, lenposition);
    if (! xdr_u_int(xdrs, &(objp->args.args_len))) {
        return (FALSE);
    }
    XDR_SETPOS(xdrs, position);
    return (TRUE);
}

Referenced by rpc_broadcast_exp().

xdr_rpcb_rmtcallres()

bool_t xdr_rpcb_rmtcallres	(	XDR *	xdrs,
		struct rpcb_rmtcallres *	p
	)

Definition at line 322 of file rpcb_prot.c.

{
    bool_t dummy;
    struct r_rpcb_rmtcallres *objp = (struct r_rpcb_rmtcallres *)(void *)p;
 
#ifdef __REACTOS__ // CVE-2017-8779
    if (!xdr_string(xdrs, &objp->addr, RPC_MAXDATASIZE)) {
#else
    if (!xdr_string(xdrs, &objp->addr, (u_int)~0)) {
#endif
        return (FALSE);
    }
    if (!xdr_u_int(xdrs, &objp->results.results_len)) {
        return (FALSE);
    }
    dummy = (*(objp->xdr_res))(xdrs, objp->results.results_val);
    return (dummy);
}

Referenced by rpc_broadcast_exp().

xdr_rpcblist()

bool_t xdr_rpcblist	(	XDR *	xdrs,
		RPCBLIST **	rp
	)

Definition at line 162 of file rpcb_prot.c.

{
    bool_t  dummy;
 
    dummy = xdr_rpcblist_ptr(xdrs, (rpcblist_ptr *)rp);
    return (dummy);
}

xdr_rpcblist_ptr()

bool_t xdr_rpcblist_ptr	(	XDR *	xdrs,
		rpcblist_ptr *	rp
	)

Definition at line 108 of file rpcb_prot.c.

{
    /*
     * more_elements is pre-computed in case the direction is
     * XDR_ENCODE or XDR_FREE.  more_elements is overwritten by
     * xdr_bool when the direction is XDR_DECODE.
     */
    bool_t more_elements;
    int freeing = (xdrs->x_op == XDR_FREE);
    rpcblist_ptr next;
    rpcblist_ptr next_copy;
 
    next = NULL;
    for (;;) {
        more_elements = (bool_t)(*rp != NULL);
        if (! xdr_bool(xdrs, &more_elements)) {
            return (FALSE);
        }
        if (! more_elements) {
            return (TRUE);  /* we are done */
        }
        /*
         * the unfortunate side effect of non-recursion is that in
         * the case of freeing we must remember the next object
         * before we free the current object ...
         */
        if (freeing)
            next = (*rp)->rpcb_next;
        if (! xdr_reference(xdrs, (caddr_t *)rp,
            (u_int)sizeof (rpcblist), (xdrproc_t)xdr_rpcb)) {
            return (FALSE);
        }
        if (freeing) {
            next_copy = next;
            rp = &next_copy;
            /*
             * Note that in the subsequent iteration, next_copy
             * gets nulled out by the xdr_reference
             * but next itself survives.
             */
        } else {
            rp = &((*rp)->rpcb_next);
        }
    }
    /*NOTREACHED*/
}

Referenced by rpcb_getmaps(), and xdr_rpcblist().