summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlfred Perlstein <alfred@FreeBSD.org>2001-02-26 09:52:43 +0000
committerAlfred Perlstein <alfred@FreeBSD.org>2001-02-26 09:52:43 +0000
commit95cbf4d3c0ff0a7e6565f6a1ea35bbe13d21f30b (patch)
treea7ed65ffe6a41bd75fa91a4708b128076f05010b
parent789d148cca33c07196fb3bb0902a6727a2dd41db (diff)
Notes
-rw-r--r--sys/net/if_media.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/net/if_media.c b/sys/net/if_media.c
index 6b67f1eaae1e..691c8cdfad7c 100644
--- a/sys/net/if_media.c
+++ b/sys/net/if_media.c
@@ -294,9 +294,12 @@ ifmedia_ioctl(ifp, ifr, ifm, cmd)
/*
* Don't allow the user to ask for too many
+ * or a negative number.
*/
if (ifmr->ifm_count > usermax)
ifmr->ifm_count = usermax;
+ else if (ifmr->ifm_count < 0)
+ return (EINVAL);
if (ifmr->ifm_count != 0) {
kptr = (int *)malloc(ifmr->ifm_count * sizeof(int),