From dc23cee8b8a93763105123f83ff2e28d93db6f55 Mon Sep 17 00:00:00 2001 From: jkim Date: Tue, 3 Jan 2006 20:34:41 +0000 Subject: Correctly check the filter length. I committed the wrong version. Pointy hat to me. --- sys/net/bpf_filter.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'sys') diff --git a/sys/net/bpf_filter.c b/sys/net/bpf_filter.c index 40b54bf..77dab7d 100644 --- a/sys/net/bpf_filter.c +++ b/sys/net/bpf_filter.c @@ -520,7 +520,12 @@ bpf_validate(f, len) register int i; register const struct bpf_insn *p; - if (len < 1) + /* Do not accept negative length filter. */ + if (len < 0) + return 0; + + /* An empty filter means accept all. */ + if (len == 0) return 1; for (i = 0; i < len; ++i) { -- cgit v1.1