Insert a missing call to MAC protection check for delivering an
mbuf to a bpf device. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Submitted by: phk
This commit is contained in:
parent
99330f8368
commit
0c7fb5347c
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=103725
@ -1136,7 +1136,11 @@ bpf_mtap(ifp, m)
|
||||
++d->bd_rcount;
|
||||
slen = bpf_filter(d->bd_filter, (u_char *)m, pktlen, 0);
|
||||
if (slen != 0)
|
||||
catchpacket(d, (u_char *)m, pktlen, slen, bpf_mcopy);
|
||||
#ifdef MAC
|
||||
if (mac_check_bpfdesc_receive(d, ifp) == 0)
|
||||
#endif
|
||||
catchpacket(d, (u_char *)m, pktlen, slen,
|
||||
bpf_mcopy);
|
||||
BPFD_UNLOCK(d);
|
||||
}
|
||||
BPFIF_UNLOCK(bp);
|
||||
|
Loading…
Reference in New Issue
Block a user