Re: [ptxdist] [PATCH] libmodbus: fix remote buffer overflow vulnerabulity

[Josef Holzmayr <holzmayr@rsi-elektrotechnik.de>]

Hi Michael,

Am 07.02.2013 19:07, schrieb Michael Olbrich:
>> +Add checks so modbus_reply returns a
>> +MODBUS_EXCEPTION_ILLEGAL_DATA_ADDRESS if the count of requested
>> +registers exceeds the spec as noted in modbus.h, line 73ff.
>
> Can you add your s-o-b here? This looks like it is something for upstream.
> Is there some bug report or something that you can reference here, so we
> know what to do with this when the next update happens?

you mean to s-o-b the patch itself? Sure, why not.

A real bugreport doesn't exist, just some bits and pieces:
- debian was not too concerned due to low count in popcon. We later 
pushed the patch into the package, though.
- an earlier version of the patch was sent to the original maintainer 
(as github pull request), he is a bit unresponsive though.

I guess the best will be to re-try and send it to upstream. Shall I keep 
you in the loop then?

Greetz
_____________________________________________________________
Josef Holzmayr
Dipl-Ing. (FH)
Entwicklung Embedded Devices / Software

Tel.: +49 8444 9204-48>
Fax:  +49 8444 9204-50
holzmayr@rsi-elektrotechnik.de

R-S-I Elektrotechnik GmbH & Co. KG
Woelkestrasse 11
D-85301 Schweitenkirchen
www.rsi-elektrotechnik.de
_____________________________________________________________
Amtsgericht Ingolstadt - GmbH: HRB 191328 - KG: HRA 170363
Geschäftsführer: Dr.-Ing. Michael Sorg, Dipl.-Ing. Franz Sorg
USt-IdNr.: DE 128592548


-- 
ptxdist mailing list
ptxdist@pengutronix.de