← Back to branch summary

~ubuntu-branches/ubuntu/wily/net-snmp/wily-proposed

« back to all changes in this revision

Viewing changes to perl/TrapReceiver/TrapReceiver.xs

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2014-04-08 08:17:14 UTC
  • Revision ID: package-import@ubuntu.com-20140408081714-31du0g3p3ggkwe9o
Tags: 5.7.2~dfsg-8.1ubuntu3
* SECURITY UPDATE: denial of service via AgentX subagent timeout
  - debian/patches/CVE-2012-6151.patch: track cancelled sessions in
    agent/mibgroup/agentx/{master.c,master_admin.c}, agent/snmp_agent.c,
    include/net-snmp/agent/snmp_agent.h.
  - CVE-2012-6151
* SECURITY UPDATE: denial of service when ICMP-MIB is in use
  - debian/patches/CVE-2014-2284.patch: fix ICMP mib table handling in
    agent/mibgroup/mibII/icmp.c, agent/mibgroup/mibII/kernel_linux.*.
  - CVE-2014-2284
* SECURITY UPDATE: denial of service in perl trap handler
  - debian/patches/CVE-2014-2285.patch: handle empty community string in
    perl/TrapReceiver/TrapReceiver.xs.
  - CVE-2014-2285

Show diffs side-by-side

added added

removed removed

Lines of Context:
perl/TrapReceiver/TrapReceiver.xs
81
81
        STOREPDUi("securitymodel", pdu->securityModel);
82
82
        STOREPDUi("securitylevel", pdu->securityLevel);
83
83
        STOREPDU("contextName",
84
 
                 newSVpv(pdu->contextName, pdu->contextNameLen));
 
84
                 newSVpv(pdu->contextName ? pdu->contextName : "", pdu->contextNameLen));
85
85
        STOREPDU("contextEngineID",
86
 
                 newSVpv((char *) pdu->contextEngineID,
 
86
                 newSVpv(pdu->contextEngineID ? (char *) pdu->contextEngineID : "",
87
87
                                    pdu->contextEngineIDLen));
88
88
        STOREPDU("securityEngineID",
89
 
                 newSVpv((char *) pdu->securityEngineID,
 
89
                 newSVpv(pdu->securityEngineID ? (char *) pdu->securityEngineID : "",
90
90
                                    pdu->securityEngineIDLen));
91
91
        STOREPDU("securityName",
92
 
                 newSVpv((char *) pdu->securityName, pdu->securityNameLen));
 
92
                 newSVpv(pdu->securityName ? (char *) pdu->securityName : "", pdu->securityNameLen));
93
93
    } else {
94
94
        STOREPDU("community",
95
 
                 newSVpv((char *) pdu->community, pdu->community_len));
 
95
                 newSVpv(pdu->community ? (char *) pdu->community : "", pdu->community_len));
96
96
    }
97
97
 
98
98
    if (transport && transport->f_fmtaddr) {