diff options
| author | Michael Tuexen <tuexen@FreeBSD.org> | 2019-04-19 17:21:35 +0000 |
|---|---|---|
| committer | Michael Tuexen <tuexen@FreeBSD.org> | 2019-04-19 17:21:35 +0000 |
| commit | ae7c65b17105e353781c7becd6fde2b532cbceb2 (patch) | |
| tree | 67203d16fcb234f971652b69d7b5d4c19efce432 | |
| parent | 2f041b74b9d5122205a6486e0d90ffd7ee91df2c (diff) | |
Notes
| -rw-r--r-- | sys/netinet6/raw_ip6.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet6/raw_ip6.c b/sys/netinet6/raw_ip6.c index bdaf36582f27..d24b3ceaaa47 100644 --- a/sys/netinet6/raw_ip6.c +++ b/sys/netinet6/raw_ip6.c @@ -495,7 +495,7 @@ rip6_output(struct mbuf *m, struct socket *so, ...) off = offsetof(struct icmp6_hdr, icmp6_cksum); else off = in6p->in6p_cksum; - if (plen < off + 1) { + if (plen < off + 2) { error = EINVAL; goto bad; } |