{"push_id":809573494,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"1238e4cf0dd18be7a4749bc202fddfd9dd1c3c8d","before":"88861010394e1586b6b7b2a03024ecc863f2d908","commits":[{"sha":"1238e4cf0dd18be7a4749bc202fddfd9dd1c3c8d","author":{"email":"93465216fd46a440eb04b27d6e009aced8b0c153@FreeBSD.org","name":"delphij"},"message":"The Sun RPC framework uses a netbuf structure to represent the transport specific form of a universal transport address. The structure is expected to be opaque to consumers. In the current implementation, the structure contains a pointer to a buffer that holds the actual address.\n\nIn rpcbind(8), netbuf structures are copied directly, which would\nresult in two netbuf structures that reference to one shared\naddress buffer.  When one of the two netbuf structures is freed,\naccess to the other netbuf structure would result in an undefined\nresult that may crash the rpcbind(8) daemon.\n\nFix this by making a copy of the buffer that is going to be freed\ninstead of doing a shallow copy.\n\nSecurity:\tFreeBSD-SA-15:24.rpcbind\nSecurity:\tCVE-2015-7236\nApproved by:\tso","distinct":true,"url":"https://api.github.com/repos/opnsense/src/commits/1238e4cf0dd18be7a4749bc202fddfd9dd1c3c8d"}]}