git: rpcinfo(8): Fix stack buffer overflow in rpcbdump()

[Aaron LI]

commit a5e541a40dbcd2ca45f56ba11b87cd8a666a5cb8
Author: Aaron LI <aly at aaronly.me>
Date:   Sat Jul 25 12:56:53 2026 +0800

    rpcinfo(8): Fix stack buffer overflow in rpcbdump()
    
    The function previously used unbounded sprintf() and strcat() to format
    the info into a fixed 256-byte stack buffer.  A malicious or compromised
    rpcbind endpoint that returns enough distinct version numbers for a
    single program (roughly 24 maximum-width decimal values plus separators)
    can overflow this buffer.
    
    CVE: CVE-2026-16461
    Openwall: CVE-2026-16277 & CVE-2026-16461: buffer overflows in rpcinfo
    	(https://www.openwall.com/lists/oss-security/2026/07/23/8)

Summary of changes:
 usr.bin/rpcinfo/rpcinfo.c | 23 ++++++++++++++++-------
 1 file changed, 16 insertions(+), 7 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/a5e541a40dbcd2ca45f56ba11b87cd8a666a5cb8


-- 
DragonFly BSD source repository