diff options
| author | Poul-Henning Kamp <phk@FreeBSD.org> | 2003-01-28 22:44:12 +0000 |
|---|---|---|
| committer | Poul-Henning Kamp <phk@FreeBSD.org> | 2003-01-28 22:44:12 +0000 |
| commit | 4ee6e70ef3bd0c318ec78f7c38277eed24db46e2 (patch) | |
| tree | ec520e5d0d2d9d114d073b7ffcde4e7ad17649bd /sys/netinet/ip_divert.c | |
| parent | bff368851168794365f0074850cce789d7accd14 (diff) | |
| download | src-4ee6e70ef3bd0c318ec78f7c38277eed24db46e2.tar.gz src-4ee6e70ef3bd0c318ec78f7c38277eed24db46e2.zip | |
Check bounds for index before dereferencing memory past end of array.
Found by: FlexeLint
Notes
Notes:
svn path=/head/; revision=110008
Diffstat (limited to 'sys/netinet/ip_divert.c')
| -rw-r--r-- | sys/netinet/ip_divert.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet/ip_divert.c b/sys/netinet/ip_divert.c index f9bad2ca1fb8..bd8ea4db0e89 100644 --- a/sys/netinet/ip_divert.c +++ b/sys/netinet/ip_divert.c @@ -284,7 +284,7 @@ div_output(struct socket *so, struct mbuf *m, * The name is user supplied data so don't trust its size * or that it is zero terminated. */ - for (i = 0; sin->sin_zero[i] && i < sizeof(sin->sin_zero); i++) + for (i = 0; i < sizeof(sin->sin_zero) && sin->sin_zero[i]; i++) ; if ( i > 0 && i < sizeof(sin->sin_zero)) m->m_pkthdr.rcvif = ifunit(sin->sin_zero); |