Insert a missing call to MAC protection check for delivering an

mbuf to a bpf device.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
Submitted by:	phk
This commit is contained in:
Robert Watson 2002-09-21 00:59:56 +00:00
parent 99330f8368
commit 0c7fb5347c
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=103725

View File

@ -1136,7 +1136,11 @@ bpf_mtap(ifp, m)
++d->bd_rcount;
slen = bpf_filter(d->bd_filter, (u_char *)m, pktlen, 0);
if (slen != 0)
catchpacket(d, (u_char *)m, pktlen, slen, bpf_mcopy);
#ifdef MAC
if (mac_check_bpfdesc_receive(d, ifp) == 0)
#endif
catchpacket(d, (u_char *)m, pktlen, slen,
bpf_mcopy);
BPFD_UNLOCK(d);
}
BPFIF_UNLOCK(bp);