diff options
author | bz <bz@FreeBSD.org> | 2008-01-24 08:25:59 +0000 |
---|---|---|
committer | bz <bz@FreeBSD.org> | 2008-01-24 08:25:59 +0000 |
commit | 1c376286e046dbe30549b705bd310d6218ffc824 (patch) | |
tree | 54dfe6089b6177f2bd726f05233e0c1a76433c3e /sys/netinet/ip_options.c | |
parent | ca561e0217663df7e35502550d299ef5f818e4e8 (diff) | |
download | FreeBSD-src-1c376286e046dbe30549b705bd310d6218ffc824.zip FreeBSD-src-1c376286e046dbe30549b705bd310d6218ffc824.tar.gz |
Replace the last susers calls in netinet6/ with privilege checks.
Introduce a new privilege allowing to set certain IP header options
(hop-by-hop, routing headers).
Leave a few comments to be addressed later.
Reviewed by: rwatson (older version, before addressing his comments)
Diffstat (limited to 'sys/netinet/ip_options.c')
-rw-r--r-- | sys/netinet/ip_options.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netinet/ip_options.c b/sys/netinet/ip_options.c index f190df1..6eeec01 100644 --- a/sys/netinet/ip_options.c +++ b/sys/netinet/ip_options.c @@ -651,6 +651,7 @@ ip_pcbopts(struct inpcb *inp, int optname, struct mbuf *m) * in actual IP option, but is stored before the * options. */ + /* XXX-BZ PRIV_NETINET_SETHDROPTS? */ if (optlen < IPOPT_MINOFF - 1 + sizeof(struct in_addr)) goto bad; m->m_len -= sizeof(struct in_addr); |