cvs commit: src/sys/net if.c

[Xin LI]

delphij     2005-02-14 05:42:06 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_5)
    sys/net              if.c 
  Log:
  MFC 1.218+1.219:
  
  Validate ifc->ifc_len before submitting its incarnation to sbuf_new,
  which will finally lead to kernel panic.
  
  Security:       This prevents a local DoS that can be exploited by
  Security:       both privileged and unprivileged users.
  Submitted by:   Wojciech A. Koszek [dunstan at freebsd czest pl]
  PR:             77421
  
  Early MFC discussed with and reviewed by:
                  security (simon, trhodes)
  
  Revision    Changes    Path
  1.199.2.12  +4 -0      src/sys/net/if.c