Module Name:    src
Committed By:   riastradh
Date:           Fri Aug 28 17:05:32 UTC 2020

Modified Files:
        src/sys/dev/usb: usbnet.c

Log Message:
usbnet: Reject buflen>MCLBYTES in usbnet_newbuf.


To generate a diff of this commit:
cvs rdiff -u -r1.38 -r1.39 src/sys/dev/usb/usbnet.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/dev/usb/usbnet.c
diff -u src/sys/dev/usb/usbnet.c:1.38 src/sys/dev/usb/usbnet.c:1.39
--- src/sys/dev/usb/usbnet.c:1.38	Sun Mar 15 23:04:51 2020
+++ src/sys/dev/usb/usbnet.c	Fri Aug 28 17:05:32 2020
@@ -1,4 +1,4 @@
-/*	$NetBSD: usbnet.c,v 1.38 2020/03/15 23:04:51 thorpej Exp $	*/
+/*	$NetBSD: usbnet.c,v 1.39 2020/08/28 17:05:32 riastradh Exp $	*/
 
 /*
  * Copyright (c) 2019 Matthew R. Green
@@ -33,7 +33,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: usbnet.c,v 1.38 2020/03/15 23:04:51 thorpej Exp $");
+__KERNEL_RCSID(0, "$NetBSD: usbnet.c,v 1.39 2020/08/28 17:05:32 riastradh Exp $");
 
 #include <sys/param.h>
 #include <sys/kernel.h>
@@ -239,6 +239,9 @@ usbnet_newbuf(size_t buflen)
 {
 	struct mbuf *m;
 
+	if (buflen > MCLBYTES)
+		return NULL;
+
 	MGETHDR(m, M_DONTWAIT, MT_DATA);
 	if (m == NULL)
 		return NULL;

Reply via email to