d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Consult sa_len before trampling it with MSG_COMPAT set.

Browse Source 
PR:             kern/5291
Submitted by:   pb@fasterix.freenix.org (Pierre Beyssac)
This commit is contained in:
Mike Smith 1997-12-15 02:29:11 +00:00
parent 5c623cb649
commit 0bec68bf7c
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/kern/uipc_syscalls.c
View File

@ -31,7 +31,7 @@
* SUCH DAMAGE.
*
* @(#)uipc_syscalls.c 8.4 (Berkeley) 2/21/94
* $Id: uipc_syscalls.c,v 1.32 1997/11/06 19:29:26 phk Exp $
* $Id: uipc_syscalls.c,v 1.33 1997/12/14 03:15:21 msmith Exp $
*/
#include "opt_ktrace.h"
@ -243,13 +243,14 @@ accept1(p, uap, compat)
return 0;
}
if (uap->name) {
/* check sa_len before it is destroyed */
if (namelen > sa->sa_len)
namelen = sa->sa_len;
#ifdef COMPAT_OLDSOCK
if (compat)
((struct osockaddr *)sa)->sa_family =
sa->sa_family;
#endif
if (namelen > sa->sa_len)
namelen = sa->sa_len;
error = copyout(sa, (caddr_t)uap->name, (u_int)namelen);
if (!error)
gotnoname: