[Pkg-net-snmp-devel] Bug#684388: agentx: Oversized Object ID

[Vincent Bernat]

Package: libsnmp15
Version: 5.4.3~dfsg-2.5
Severity: important
Tags: upstream patch

Hi!

AgentX support is ineffective when a manager requests unrelated OID in
the same GET request. snmpd will send those unrelated variables into
the same PDU to the subagent and the subagent will choke with:

agentx: Oversized Object ID

This happens if one of the requested OID is larger than the previous
one:

agentx/master: request for variable (iso.3.6.1.2.1.2.2.1.7.7)
agentx/master: request for variable (iso.3.6.1.2.1.2.2.1.2.10)
agentx/master: request for variable (iso.3.6.1.2.1.2.2.1.8.7)
agentx/master: request for variable (iso.3.6.1.3.53.5.5.2.1.3.101)

First three OID contain 11 subid while the next one has 12
subid. snmpd will try several time to communicate those OID to the
subagent and will give up. A manager requesting always the same OID
will never get an answer.

The bug is fixed upstream in 5.4.4. I attach the revelant patch
extracted from the git repository. I think it may warrant a freeze
exception. The bug is 100% reproducible on my platform.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libsnmp15 depends on:
ii  libc6         2.13-35
ii  libperl5.14   5.14.2-12
ii  libsensors4   1:3.3.2-2
ii  libsnmp-base  5.4.3~dfsg-2.5
ii  libssl1.0.0   1.0.1c-4
ii  libwrap0      7.6.q-24

libsnmp15 recommends no packages.

libsnmp15 suggests no packages.

-- Configuration Files:
/etc/snmp/snmp.conf changed:


-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-NEWS-snmpd-Patch-3141462-from-fenner-fix-agentx-suba.patch
Type: text/x-diff
Size: 1215 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-net-snmp-devel/attachments/20120809/25e0ab86/attachment.patch>