d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

libstand: NULL pointer dereference in rarp

Browse Source 
readether argument is missing & operator.

CID:		1374944
Reported by:	Coverity, cem
Reviewed by:	cem
Differential Revision:	https://reviews.freebsd.org/D10663
This commit is contained in:
tsoome 2017-05-10 15:35:41 +00:00
parent b2359e58e4
commit 1b6e9c0c9d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/libstand/rarp.c
View File

@ -155,7 +155,7 @@ rarprecv(struct iodesc *d, void **pkt, void **payload, time_t tleft)
printf("rarprecv: "); printf("rarprecv: ");
#endif #endif
n = readether(d, ptr, (void **)&ap, tleft, &etype); n = readether(d, &ptr, (void **)&ap, tleft, &etype);
errno = 0; /* XXX */ errno = 0; /* XXX */
if (n == -1 || n < sizeof(struct ether_arp)) { if (n == -1 || n < sizeof(struct ether_arp)) {
#ifdef RARP_DEBUG #ifdef RARP_DEBUG