diff options
| author | Luiz Otavio O Souza <loos@FreeBSD.org> | 2015-08-17 23:03:54 +0000 |
|---|---|---|
| committer | Luiz Otavio O Souza <loos@FreeBSD.org> | 2015-08-17 23:03:54 +0000 |
| commit | f2fc809dcd122b7d7d618e7b6c548d89d8a92f91 (patch) | |
| tree | fc5461debd573d38939cc8b79d14e9230acbe169 /sys/netpfil | |
| parent | e462b1275587e3ad75f4b72497d8b4670f745a94 (diff) | |
| download | src-f2fc809dcd122b7d7d618e7b6c548d89d8a92f91.tar.gz src-f2fc809dcd122b7d7d618e7b6c548d89d8a92f91.zip | |
Fix the copy of addresses passed from userland in table replace command.
The size2 is the maximum userland buffer size (used when the addresses are
copied back to userland).
Obtained from: pfSense
MFC after: 3 days
Sponsored by: Rubicon Communications (Netgate)
Notes
Notes:
svn path=/head/; revision=286862
Diffstat (limited to 'sys/netpfil')
| -rw-r--r-- | sys/netpfil/pf/pf_ioctl.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sys/netpfil/pf/pf_ioctl.c b/sys/netpfil/pf/pf_ioctl.c index a062401cdfed..ba43de8d37b8 100644 --- a/sys/netpfil/pf/pf_ioctl.c +++ b/sys/netpfil/pf/pf_ioctl.c @@ -2724,8 +2724,7 @@ DIOCCHANGEADDR_error: error = ENODEV; break; } - totlen = (io->pfrio_size + io->pfrio_size2) * - sizeof(struct pfr_addr); + totlen = io->pfrio_size * sizeof(struct pfr_addr); pfras = malloc(totlen, M_TEMP, M_WAITOK); error = copyin(io->pfrio_buffer, pfras, totlen); if (error) { |