From 8fb51c23ad0bf57e576afcc0dd0433bbf8ad8815 Mon Sep 17 00:00:00 2001 From: jkim Date: Fri, 29 Aug 2008 15:49:40 +0000 Subject: Make sure BPF program is not bigger than set maximum (net.bpf.maxinsns). --- sys/netgraph/ng_bpf.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'sys/netgraph/ng_bpf.c') diff --git a/sys/netgraph/ng_bpf.c b/sys/netgraph/ng_bpf.c index 6c4c212..7d7aa26 100644 --- a/sys/netgraph/ng_bpf.c +++ b/sys/netgraph/ng_bpf.c @@ -104,6 +104,9 @@ static ng_newhook_t ng_bpf_newhook; static ng_rcvdata_t ng_bpf_rcvdata; static ng_disconnect_t ng_bpf_disconnect; +/* Maximum bpf program instructions */ +extern int bpf_maxinsns; + /* Internal helper functions */ static int ng_bpf_setprog(hook_p hook, const struct ng_bpf_hookprog *hp); @@ -560,7 +563,8 @@ ng_bpf_setprog(hook_p hook, const struct ng_bpf_hookprog *hp0) int size; /* Check program for validity */ - if (!bpf_validate(hp0->bpf_prog, hp0->bpf_prog_len)) + if (hp0->bpf_prog_len > bpf_maxinsns || + !bpf_validate(hp0->bpf_prog, hp0->bpf_prog_len)) return (EINVAL); /* Make a copy of the program */ -- cgit v1.1