162 lines
5.1 KiB
Diff
162 lines
5.1 KiB
Diff
From 5f881d3bf24599b90d67a45cae7a3eb099cd71c9 Mon Sep 17 00:00:00 2001
|
|
From: Bart Van Assche <bvanassche@acm.org>
|
|
Date: Sat, 27 Jul 2019 19:34:09 -0700
|
|
Subject: [PATCH] libsnmp, USM: Introduce a reference count in struct
|
|
usmStateReference
|
|
|
|
This patch fixes https://sourceforge.net/p/net-snmp/bugs/2956/.
|
|
---
|
|
snmplib/snmp_client.c | 22 +++----------
|
|
snmplib/snmpusm.c | 73 ++++++++++++++++++++++++++++---------------
|
|
2 files changed, 53 insertions(+), 42 deletions(-)
|
|
|
|
diff --git a/snmplib/snmp_client.c b/snmplib/snmp_client.c
|
|
index 2a46351..b2ea891 100644
|
|
--- a/snmplib/snmp_client.c
|
|
+++ b/snmplib/snmp_client.c
|
|
@@ -402,27 +402,16 @@ _clone_pdu_header(netsnmp_pdu *pdu)
|
|
return NULL;
|
|
}
|
|
|
|
- if (pdu->securityStateRef &&
|
|
- pdu->command == SNMP_MSG_TRAP2) {
|
|
-
|
|
- ret = usm_clone_usmStateReference((struct usmStateReference *) pdu->securityStateRef,
|
|
- (struct usmStateReference **) &newpdu->securityStateRef );
|
|
-
|
|
- if (ret)
|
|
- {
|
|
+ sptr = find_sec_mod(newpdu->securityModel);
|
|
+ if (sptr && sptr->pdu_clone) {
|
|
+ /* call security model if it needs to know about this */
|
|
+ ret = sptr->pdu_clone(pdu, newpdu);
|
|
+ if (ret) {
|
|
snmp_free_pdu(newpdu);
|
|
return NULL;
|
|
}
|
|
}
|
|
|
|
- if ((sptr = find_sec_mod(newpdu->securityModel)) != NULL &&
|
|
- sptr->pdu_clone != NULL) {
|
|
- /*
|
|
- * call security model if it needs to know about this
|
|
- */
|
|
- (*sptr->pdu_clone) (pdu, newpdu);
|
|
- }
|
|
-
|
|
return newpdu;
|
|
}
|
|
|
|
diff --git a/snmplib/snmpusm.c b/snmplib/snmpusm.c
|
|
index c4e11b3..9e912c1 100644
|
|
--- a/snmplib/snmpusm.c
|
|
+++ b/snmplib/snmpusm.c
|
|
@@ -85,6 +85,7 @@ netsnmp_feature_child_of(usm_support, usm_all)
|
|
netsnmp_feature_require(usm_support)
|
|
|
|
struct usmStateReference {
|
|
+ int refcnt;
|
|
char *usr_name;
|
|
size_t usr_name_length;
|
|
u_char *usr_engine_id;
|
|
@@ -301,43 +302,63 @@ free_enginetime_on_shutdown(int majorid, int minorid, void *serverarg,
|
|
struct usmStateReference *
|
|
usm_malloc_usmStateReference(void)
|
|
{
|
|
- struct usmStateReference *retval = (struct usmStateReference *)
|
|
- calloc(1, sizeof(struct usmStateReference));
|
|
+ struct usmStateReference *retval;
|
|
+
|
|
+ retval = calloc(1, sizeof(struct usmStateReference));
|
|
+ if (retval)
|
|
+ retval->refcnt = 1;
|
|
|
|
return retval;
|
|
} /* end usm_malloc_usmStateReference() */
|
|
|
|
+static int
|
|
+usm_clone(netsnmp_pdu *pdu, netsnmp_pdu *new_pdu)
|
|
+{
|
|
+ struct usmStateReference *ref = pdu->securityStateRef;
|
|
+ struct usmStateReference **new_ref =
|
|
+ (struct usmStateReference **)&new_pdu->securityStateRef;
|
|
+ int ret = 0;
|
|
+
|
|
+ if (!ref)
|
|
+ return ret;
|
|
+
|
|
+ if (pdu->command == SNMP_MSG_TRAP2) {
|
|
+ netsnmp_assert(pdu->securityModel == SNMP_DEFAULT_SECMODEL);
|
|
+ ret = usm_clone_usmStateReference(ref, new_ref);
|
|
+ } else {
|
|
+ netsnmp_assert(ref == *new_ref);
|
|
+ ref->refcnt++;
|
|
+ }
|
|
+
|
|
+ return ret;
|
|
+}
|
|
|
|
void
|
|
usm_free_usmStateReference(void *old)
|
|
{
|
|
- struct usmStateReference *old_ref = (struct usmStateReference *) old;
|
|
-
|
|
- if (old_ref) {
|
|
-
|
|
- if (old_ref->usr_name_length)
|
|
- SNMP_FREE(old_ref->usr_name);
|
|
- if (old_ref->usr_engine_id_length)
|
|
- SNMP_FREE(old_ref->usr_engine_id);
|
|
- if (old_ref->usr_auth_protocol_length)
|
|
- SNMP_FREE(old_ref->usr_auth_protocol);
|
|
- if (old_ref->usr_priv_protocol_length)
|
|
- SNMP_FREE(old_ref->usr_priv_protocol);
|
|
-
|
|
- if (old_ref->usr_auth_key_length && old_ref->usr_auth_key) {
|
|
- SNMP_ZERO(old_ref->usr_auth_key, old_ref->usr_auth_key_length);
|
|
- SNMP_FREE(old_ref->usr_auth_key);
|
|
- }
|
|
- if (old_ref->usr_priv_key_length && old_ref->usr_priv_key) {
|
|
- SNMP_ZERO(old_ref->usr_priv_key, old_ref->usr_priv_key_length);
|
|
- SNMP_FREE(old_ref->usr_priv_key);
|
|
- }
|
|
+ struct usmStateReference *ref = old;
|
|
+
|
|
+ if (!ref)
|
|
+ return;
|
|
+
|
|
+ if (--ref->refcnt > 0)
|
|
+ return;
|
|
|
|
- SNMP_ZERO(old_ref, sizeof(*old_ref));
|
|
- SNMP_FREE(old_ref);
|
|
+ SNMP_FREE(ref->usr_name);
|
|
+ SNMP_FREE(ref->usr_engine_id);
|
|
+ SNMP_FREE(ref->usr_auth_protocol);
|
|
+ SNMP_FREE(ref->usr_priv_protocol);
|
|
|
|
+ if (ref->usr_auth_key_length && ref->usr_auth_key) {
|
|
+ SNMP_ZERO(ref->usr_auth_key, ref->usr_auth_key_length);
|
|
+ SNMP_FREE(ref->usr_auth_key);
|
|
+ }
|
|
+ if (ref->usr_priv_key_length && ref->usr_priv_key) {
|
|
+ SNMP_ZERO(ref->usr_priv_key, ref->usr_priv_key_length);
|
|
+ SNMP_FREE(ref->usr_priv_key);
|
|
}
|
|
|
|
+ SNMP_FREE(ref);
|
|
} /* end usm_free_usmStateReference() */
|
|
|
|
struct usmUser *
|
|
@@ -3332,6 +3353,7 @@ init_usm(void)
|
|
def->encode_reverse = usm_secmod_rgenerate_out_msg;
|
|
def->encode_forward = usm_secmod_generate_out_msg;
|
|
def->decode = usm_secmod_process_in_msg;
|
|
+ def->pdu_clone = usm_clone;
|
|
def->pdu_free_state_ref = usm_free_usmStateReference;
|
|
def->session_setup = usm_session_init;
|
|
def->handle_report = usm_handle_report;
|
|
--
|
|
1.8.3.1
|
|
|