svn commit: r299615 - stable/10/sys/net
Garrett Cooper
ngie at FreeBSD.org
Fri May 13 08:04:58 UTC 2016
Author: ngie
Date: Fri May 13 08:04:57 2016
New Revision: 299615
URL: https://svnweb.freebsd.org/changeset/base/299615
Log:
MFC r298328:
r298328 (by cem):
bpf_getdltlist: Don't overrun 'lst'
'lst' is allocated with 'n1' members. 'n' indexes 'lst'. So 'n == n1' is an
invalid 'lst' index. This is a follow-up to r296009.
CID: 1352743
Modified:
stable/10/sys/net/bpf.c
Directory Properties:
stable/10/ (props changed)
Modified: stable/10/sys/net/bpf.c
==============================================================================
--- stable/10/sys/net/bpf.c Fri May 13 08:04:03 2016 (r299614)
+++ stable/10/sys/net/bpf.c Fri May 13 08:04:57 2016 (r299615)
@@ -2643,7 +2643,7 @@ again:
LIST_FOREACH(bp, &bpf_iflist, bif_next) {
if (bp->bif_ifp != ifp)
continue;
- if (n > n1) {
+ if (n >= n1) {
free(lst, M_TEMP);
goto again;
}
More information about the svn-src-stable
mailing list