diff options
| author | syrinx <syrinx@FreeBSD.org> | 2006-12-03 21:50:57 +0000 |
|---|---|---|
| committer | syrinx <syrinx@FreeBSD.org> | 2006-12-03 21:50:57 +0000 |
| commit | ded74f7ed853b2dd1444c4e63c776e1070ebaa14 (patch) | |
| tree | b6f2a719782fdb4b892fab0bf42493d1695e960f | |
| parent | 8035e46d9a8b2ee6553f51d3bcc69a0420121ea4 (diff) | |
| download | FreeBSD-src-ded74f7ed853b2dd1444c4e63c776e1070ebaa14.zip FreeBSD-src-ded74f7ed853b2dd1444c4e63c776e1070ebaa14.tar.gz | |
Fix SIOCGDRVSPEC/BRDGGIFSSTP ioctl: make it copyin() the user
provided buffer length before trying to use it.
Reviewed by: thompsa
Approved by: bz (mentor)
MFC after: 3 days
| -rw-r--r-- | sys/net/if_bridge.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/net/if_bridge.c b/sys/net/if_bridge.c index c88ec83..7118b2e 100644 --- a/sys/net/if_bridge.c +++ b/sys/net/if_bridge.c @@ -421,7 +421,7 @@ const struct bridge_control bridge_control_table[] = { BC_F_COPYOUT }, { bridge_ioctl_gifsstp, sizeof(struct ifbpstpconf), - BC_F_COPYOUT }, + BC_F_COPYIN|BC_F_COPYOUT }, { bridge_ioctl_sproto, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER }, |
