Fix SIOCGDRVSPEC/BRDGGIFSSTP ioctl: make it copyin() the user

provided buffer length before trying to use it.

Reviewed by:	thompsa
Approved by:	bz (mentor)
MFC after:	3 days
This commit is contained in:
syrinx 2006-12-03 21:50:57 +00:00
parent 8035e46d9a
commit ded74f7ed8

View File

@ -421,7 +421,7 @@ const struct bridge_control bridge_control_table[] = {
BC_F_COPYOUT },
{ bridge_ioctl_gifsstp, sizeof(struct ifbpstpconf),
BC_F_COPYOUT },
BC_F_COPYIN|BC_F_COPYOUT },
{ bridge_ioctl_sproto, sizeof(struct ifbrparam),
BC_F_COPYIN|BC_F_SUSER },