Subject: lib/22525: rpc library/NIS code does not handle fd > FD_SETSIZE
To: None <gnats-bugs@gnats.netbsd.org>
From: None <itojun@itojun.org>
List: netbsd-bugs
Date: 08/18/2003 14:05:35
>Number: 22525
>Category: lib
>Synopsis: rpc library/NIS code does not handle fd > FD_SETSIZE
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: lib-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Mon Aug 18 06:04:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator: Jun-ichiro itojun Hagino
>Release: NetBSD 1.6W
>Organization:
itojun.org
>Environment:
System: NetBSD starfruit.itojun.org 1.6W NetBSD 1.6W (STARFRUIT) #269: Mon Aug 18 13:20:50 JST 2003 itojun@starfruit.itojun.org:/home/itojun/NetBSD/src/sys/arch/i386/compile/STARFRUIT i386
Architecture: i386
Machine: i386
>Description:
libc RPC logic does not handle file descriptors larger than FD_SETSIZE.
for instance, lib/libc/rpc/svc.c:xprt_register() silently ignores
sock > FD_SETSIZE. other functions behave like so.
the problem exists in NIS and other RPC userland code (outside of
library) as well, as fd_set manipulation is exposed as API.
>How-To-Repeat:
code inspection
>Fix:
it would be difficult as fd_set manipulation is exposed as API
(such as svc_fdset in /usr/include/rpc/svc.h).
>Release-Note:
>Audit-Trail:
>Unformatted: