FreeBSD Bugzilla – Attachment 156159 Details for
Bug 199818
[rum] [patch]: check mbuf size before accessing it
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Do not search for a transmitter for some control frames
patch-rum-check.diff (text/plain), 601 bytes, created by
Andriy Voskoboinyk
on 2015-04-30 15:45:23 UTC
(
hide
)
Description:
Do not search for a transmitter for some control frames
Filename:
MIME Type:
Creator:
Andriy Voskoboinyk
Created:
2015-04-30 15:45:23 UTC
Size:
601 bytes
patch
obsolete
>Index: sys/dev/usb/wlan/if_rum.c >=================================================================== >--- sys/dev/usb/wlan/if_rum.c (revision 281839) >+++ sys/dev/usb/wlan/if_rum.c (working copy) >@@ -956,8 +954,12 @@ > */ > RUM_UNLOCK(sc); > if (m) { >- ni = ieee80211_find_rxnode(ic, >- mtod(m, struct ieee80211_frame_min *)); >+ if (m->m_len >= sizeof(struct ieee80211_frame_min)) { >+ ni = ieee80211_find_rxnode(ic, >+ mtod(m, struct ieee80211_frame_min *)); >+ } else >+ ni = NULL; >+ > if (ni != NULL) { > (void) ieee80211_input(ni, m, rssi, > RT2573_NOISE_FLOOR);
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=156159">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 199818
: 156159