CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/09/08 12:42:14
Modified files:
sys/net : pf_if.c
Log message:
Fix off-by-one in pf(4) ioctl DIOCIGETIFACES
The check for buffer exhaustion in pfi_get_ifaces() is off-by-one.
This leaves the last part of the buffer uninitialized and copies
out foreign heap data.
from Johann Hoepfner; OK deraadt@ sashan@
