diff options
author | Shteryana Shopova <syrinx@FreeBSD.org> | 2006-12-03 21:50:57 +0000 |
---|---|---|
committer | Shteryana Shopova <syrinx@FreeBSD.org> | 2006-12-03 21:50:57 +0000 |
commit | b8f45801b07022c3029de3e880b9e96a977c992f (patch) | |
tree | b6f2a719782fdb4b892fab0bf42493d1695e960f /sys/net/if_bridge.c | |
parent | 786e4fc47d40de5d7e0b56f15c68843447ae5eaa (diff) | |
download | src-b8f45801b07022c3029de3e880b9e96a977c992f.tar.gz src-b8f45801b07022c3029de3e880b9e96a977c992f.zip |
Fix SIOCGDRVSPEC/BRDGGIFSSTP ioctl: make it copyin() the user
provided buffer length before trying to use it.
Reviewed by: thompsa
Approved by: bz (mentor)
MFC after: 3 days
Notes
Notes:
svn path=/head/; revision=164861
Diffstat (limited to 'sys/net/if_bridge.c')
-rw-r--r-- | sys/net/if_bridge.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/net/if_bridge.c b/sys/net/if_bridge.c index c88ec83d8bdf..7118b2e01cc5 100644 --- a/sys/net/if_bridge.c +++ b/sys/net/if_bridge.c @@ -421,7 +421,7 @@ const struct bridge_control bridge_control_table[] = { BC_F_COPYOUT }, { bridge_ioctl_gifsstp, sizeof(struct ifbpstpconf), - BC_F_COPYOUT }, + BC_F_COPYIN|BC_F_COPYOUT }, { bridge_ioctl_sproto, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER }, |