From 88b86d19fbf893333c3a2db046d5cb8d0b10bdea Mon Sep 17 00:00:00 2001 From: phk Date: Tue, 28 Jan 2003 22:44:12 +0000 Subject: Check bounds for index before dereferencing memory past end of array. Found by: FlexeLint --- sys/netinet/ip_divert.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys') diff --git a/sys/netinet/ip_divert.c b/sys/netinet/ip_divert.c index f9bad2c..bd8ea4d 100644 --- a/sys/netinet/ip_divert.c +++ b/sys/netinet/ip_divert.c @@ -284,7 +284,7 @@ div_output(struct socket *so, struct mbuf *m, * The name is user supplied data so don't trust its size * or that it is zero terminated. */ - for (i = 0; sin->sin_zero[i] && i < sizeof(sin->sin_zero); i++) + for (i = 0; i < sizeof(sin->sin_zero) && sin->sin_zero[i]; i++) ; if ( i > 0 && i < sizeof(sin->sin_zero)) m->m_pkthdr.rcvif = ifunit(sin->sin_zero); -- cgit v1.1