diff options
| author | Bill Paul <wpaul@FreeBSD.org> | 1999-07-04 14:41:34 +0000 |
|---|---|---|
| committer | Bill Paul <wpaul@FreeBSD.org> | 1999-07-04 14:41:34 +0000 |
| commit | 306d2dcc69cbefaf750c9e22f942a7696806d41f (patch) | |
| tree | 248ba497e731a0fb6aa6ffda261516f9cd9faea9 | |
| parent | 5379167cd61098d538ef17a6bb5fb0a2160d9877 (diff) | |
Notes
| -rw-r--r-- | sys/i386/isa/if_wi.c | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/sys/i386/isa/if_wi.c b/sys/i386/isa/if_wi.c index 067862c3beb2..5b1ba03cefa3 100644 --- a/sys/i386/isa/if_wi.c +++ b/sys/i386/isa/if_wi.c @@ -29,7 +29,7 @@ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF * THE POSSIBILITY OF SUCH DAMAGE. * - * $Id: if_wi.c,v 1.6 1999/06/06 16:44:04 wpaul Exp $ + * $Id: if_wi.c,v 1.56 1999/07/04 14:35:23 wpaul Exp $ */ /* @@ -116,7 +116,7 @@ #if !defined(lint) static const char rcsid[] = - "$Id: if_wi.c,v 1.6 1999/06/06 16:44:04 wpaul Exp $"; + "$Id: if_wi.c,v 1.56 1999/07/04 14:35:23 wpaul Exp $"; #endif static struct wi_softc wi_softc[NWI]; @@ -415,6 +415,14 @@ static void wi_rxeof(sc) if (rx_frame.wi_status == WI_STAT_1042 || rx_frame.wi_status == WI_STAT_TUNNEL || rx_frame.wi_status == WI_STAT_WMP_MSG) { + if((rx_frame.wi_dat_len + WI_SNAPHDR_LEN) > MCLBYTES) { + printf("wi%d: oversized packet received " + "(wi_dat_len=%d, wi_status=0x%x)\n", sc->wi_unit, + rx_frame.wi_dat_len, rx_frame.wi_status); + m_freem(m); + ifp->if_ierrors++; + return; + } m->m_pkthdr.len = m->m_len = rx_frame.wi_dat_len + WI_SNAPHDR_LEN; @@ -433,6 +441,15 @@ static void wi_rxeof(sc) return; } } else { + if((rx_frame.wi_dat_len + + sizeof(struct ether_header)) > MCLBYTES) { + printf("wi%d: oversized packet received " + "(wi_dat_len=%d, wi_status=0x%x)\n", sc->wi_unit, + rx_frame.wi_dat_len, rx_frame.wi_status); + m_freem(m); + ifp->if_ierrors++; + return; + } m->m_pkthdr.len = m->m_len = rx_frame.wi_dat_len + sizeof(struct ether_header); |