Author: ngie
Date: Fri May 13 08:04:57 2016
New Revision: 299615
URL: https://svnweb.freebsd.org/changeset/base/299615
Log:
MFC r298328:
r298328 (by cem):
bpf_getdltlist: Don't overrun 'lst'
'lst' is allocated with 'n1' members. 'n' indexes 'lst'. So 'n == n1' is an
invalid 'lst' index. This is a follow-up to r296009.
CID: 1352743
Modified:
stable/10/sys/net/bpf.c
Directory Properties:
stable/10/ (props changed)
Modified: stable/10/sys/net/bpf.c
==============================================================================
--- stable/10/sys/net/bpf.c Fri May 13 08:04:03 2016 (r299614)
+++ stable/10/sys/net/bpf.c Fri May 13 08:04:57 2016 (r299615)
@@ -2643,7 +2643,7 @@ again:
LIST_FOREACH(bp, &bpf_iflist, bif_next) {
if (bp->bif_ifp != ifp)
continue;
- if (n > n1) {
+ if (n >= n1) {
free(lst, M_TEMP);
goto again;
}
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10
To unsubscribe, send any mail to "[email protected]"
