d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Check bounds for index before dereferencing memory past end of array.

Browse Source 
Found by:	FlexeLint
This commit is contained in:
Poul-Henning Kamp 2003-01-28 22:44:12 +00:00
parent bff3688511
commit 4ee6e70ef3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/netinet/ip_divert.c
View File

@ -284,7 +284,7 @@ div_output(struct socket *so, struct mbuf *m,
* The name is user supplied data so don't trust its size
* or that it is zero terminated.
*/
for (i = 0; sin->sin_zero[i] && i < sizeof(sin->sin_zero); i++)
for (i = 0; i < sizeof(sin->sin_zero) && sin->sin_zero[i]; i++)
;
if ( i > 0 && i < sizeof(sin->sin_zero))
m->m_pkthdr.rcvif = ifunit(sin->sin_zero);