aboutsummaryrefslogtreecommitdiff
path: root/sys/net/if_bridge.c
diff options
context:
space:
mode:
authorShteryana Shopova <syrinx@FreeBSD.org>2006-12-03 21:50:57 +0000
committerShteryana Shopova <syrinx@FreeBSD.org>2006-12-03 21:50:57 +0000
commitb8f45801b07022c3029de3e880b9e96a977c992f (patch)
treeb6f2a719782fdb4b892fab0bf42493d1695e960f /sys/net/if_bridge.c
parent786e4fc47d40de5d7e0b56f15c68843447ae5eaa (diff)
downloadsrc-b8f45801b07022c3029de3e880b9e96a977c992f.tar.gz
src-b8f45801b07022c3029de3e880b9e96a977c992f.zip
Fix SIOCGDRVSPEC/BRDGGIFSSTP ioctl: make it copyin() the user
provided buffer length before trying to use it. Reviewed by: thompsa Approved by: bz (mentor) MFC after: 3 days
Notes
Notes: svn path=/head/; revision=164861
Diffstat (limited to 'sys/net/if_bridge.c')
-rw-r--r--sys/net/if_bridge.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/net/if_bridge.c b/sys/net/if_bridge.c
index c88ec83d8bdf..7118b2e01cc5 100644
--- a/sys/net/if_bridge.c
+++ b/sys/net/if_bridge.c
@@ -421,7 +421,7 @@ const struct bridge_control bridge_control_table[] = {
BC_F_COPYOUT },
{ bridge_ioctl_gifsstp, sizeof(struct ifbpstpconf),
- BC_F_COPYOUT },
+ BC_F_COPYIN|BC_F_COPYOUT },
{ bridge_ioctl_sproto, sizeof(struct ifbrparam),
BC_F_COPYIN|BC_F_SUSER },