svn commit: r299615 - stable/10/sys/net

Garrett Cooper ngie at FreeBSD.org
Fri May 13 08:04:58 UTC 2016


Author: ngie
Date: Fri May 13 08:04:57 2016
New Revision: 299615
URL: https://svnweb.freebsd.org/changeset/base/299615

Log:
  MFC r298328:
  r298328 (by cem):
  
  bpf_getdltlist: Don't overrun 'lst'
  
  'lst' is allocated with 'n1' members.  'n' indexes 'lst'.  So 'n == n1' is an
  invalid 'lst' index.  This is a follow-up to r296009.
  
  CID:		1352743

Modified:
  stable/10/sys/net/bpf.c
Directory Properties:
  stable/10/   (props changed)

Modified: stable/10/sys/net/bpf.c
==============================================================================
--- stable/10/sys/net/bpf.c	Fri May 13 08:04:03 2016	(r299614)
+++ stable/10/sys/net/bpf.c	Fri May 13 08:04:57 2016	(r299615)
@@ -2643,7 +2643,7 @@ again:
 	LIST_FOREACH(bp, &bpf_iflist, bif_next) {
 		if (bp->bif_ifp != ifp)
 			continue;
-		if (n > n1) {
+		if (n >= n1) {
 			free(lst, M_TEMP);
 			goto again;
 		}


More information about the svn-src-stable mailing list