diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2003-09-29 18:35:17 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2003-09-29 18:35:17 +0000 |
| commit | cc7b13bfe0dc4a881a42519ba6f8a959d0452d4e (patch) | |
| tree | 47c1481436e72b7588b2964c34c6203146488293 /sys/security/mac | |
| parent | 6cfa0cbdeea3c564489485760f4f1e026d3d7b22 (diff) | |
Notes
Diffstat (limited to 'sys/security/mac')
| -rw-r--r-- | sys/security/mac/mac_framework.c | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_internal.h | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_net.c | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_pipe.c | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_process.c | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_syscalls.c | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_system.c | 3 | ||||
| -rw-r--r-- | sys/security/mac/mac_vfs.c | 3 |
8 files changed, 16 insertions, 8 deletions
diff --git a/sys/security/mac/mac_framework.c b/sys/security/mac/mac_framework.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_framework.c +++ b/sys/security/mac/mac_framework.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_internal.h b/sys/security/mac/mac_internal.h index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_internal.h +++ b/sys/security/mac/mac_internal.h @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_net.c b/sys/security/mac/mac_net.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_net.c +++ b/sys/security/mac/mac_net.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_pipe.c b/sys/security/mac/mac_pipe.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_pipe.c +++ b/sys/security/mac/mac_pipe.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_process.c b/sys/security/mac/mac_process.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_process.c +++ b/sys/security/mac/mac_process.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_syscalls.c b/sys/security/mac/mac_syscalls.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_syscalls.c +++ b/sys/security/mac/mac_syscalls.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_system.c b/sys/security/mac/mac_system.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_system.c +++ b/sys/security/mac/mac_system.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); diff --git a/sys/security/mac/mac_vfs.c b/sys/security/mac/mac_vfs.c index 700b0291ce03d..db3ade90f790b 100644 --- a/sys/security/mac/mac_vfs.c +++ b/sys/security/mac/mac_vfs.c @@ -1176,7 +1176,8 @@ static int mac_check_structmac_consistent(struct mac *mac) { - if (mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) + if (mac->m_buflen < 0 || + mac->m_buflen > MAC_MAX_LABEL_BUF_LEN) return (EINVAL); return (0); |