Date: Sat, 3 Aug 2019 14:42:07 +0000 (UTC) From: "George V. Neville-Neil" <gnn@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r350557 - head/sys/net Message-ID: <201908031442.x73Eg7wA063658@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: gnn Date: Sat Aug 3 14:42:07 2019 New Revision: 350557 URL: https://svnweb.freebsd.org/changeset/base/350557 Log: Properly validte arguments for route deletion Reported by: Liang Zhuo brightiup.zhuo@gmail.com MFC after: 1 week Modified: head/sys/net/route.c Modified: head/sys/net/route.c ============================================================================== --- head/sys/net/route.c Sat Aug 3 13:53:14 2019 (r350556) +++ head/sys/net/route.c Sat Aug 3 14:42:07 2019 (r350557) @@ -1590,6 +1590,8 @@ rtrequest1_fib(int req, struct rt_addrinfo *info, stru switch (req) { case RTM_DELETE: if (netmask) { + if (dst->sa_len > sizeof(mdst)) + return (EINVAL); rt_maskedcopy(dst, (struct sockaddr *)&mdst, netmask); dst = (struct sockaddr *)&mdst; }
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201908031442.x73Eg7wA063658>