diff options
| -rw-r--r-- | sys/net/if_media.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/net/if_media.c b/sys/net/if_media.c index 6b67f1e..691c8cd 100644 --- a/sys/net/if_media.c +++ b/sys/net/if_media.c @@ -294,9 +294,12 @@ ifmedia_ioctl(ifp, ifr, ifm, cmd) /* * Don't allow the user to ask for too many + * or a negative number. */ if (ifmr->ifm_count > usermax) ifmr->ifm_count = usermax; + else if (ifmr->ifm_count < 0) + return (EINVAL); if (ifmr->ifm_count != 0) { kptr = (int *)malloc(ifmr->ifm_count * sizeof(int), |
