CVS commit: [netbsd-11] src/sys/nfs

Module Name:	src
Committed By:	martin
Date:		Sat Jun 27 09:46:05 UTC 2026

Modified Files:
	src/sys/nfs [netbsd-11]: nfs.h nfs_serv.c nfs_srvsocket.c
	    nfs_syscalls.c

Log Message:
Pull up following revision(s) (requested by christos in ticket #313):

	sys/nfs/nfs_serv.c: revision 1.185
	sys/nfs/nfs_srvsocket.c: revision 1.7
	sys/nfs/nfs_syscalls.c: revision 1.165
	sys/nfs/nfs.h: revision 1.83

Prevent a DoS attack by stuffing the server with too many fragments that
can lead to resource exhaustion and memory corruption. Reported by Andrew Griffiths

Validate the rpc readdir and readdirplus cnt, siz to prevent integer overflows
that will corrupt memory. Reported by Andrew Griffiths

Fix memory leak. ns_frag holds the unprocessed fragments that needs to be freed.
Reported by Andrew Griffiths


To generate a diff of this commit:
cvs rdiff -u -r1.81 -r1.81.2.1 src/sys/nfs/nfs.h
cvs rdiff -u -r1.184 -r1.184.8.1 src/sys/nfs/nfs_serv.c
cvs rdiff -u -r1.6 -r1.6.2.1 src/sys/nfs/nfs_srvsocket.c
cvs rdiff -u -r1.164 -r1.164.2.1 src/sys/nfs/nfs_syscalls.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.