summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorColin Percival <cperciva@FreeBSD.org>2004-11-28 19:16:00 +0000
committerColin Percival <cperciva@FreeBSD.org>2004-11-28 19:16:00 +0000
commitb96e102ae23289e18d27a042049a4161612b59f0 (patch)
tree324593ac5e009e2855d441b4c18f58073d9c1e65
parent7e07597cfc65793478b50c5efc64288b5a5191a9 (diff)
Notes
-rw-r--r--sys/kern/vfs_export.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/kern/vfs_export.c b/sys/kern/vfs_export.c
index dd217822b2b5..082bb0aea123 100644
--- a/sys/kern/vfs_export.c
+++ b/sys/kern/vfs_export.c
@@ -129,6 +129,10 @@ vfs_hang_addrlist(mp, nep, argp)
saddr = (struct sockaddr *) (np + 1);
if ((error = copyin(argp->ex_addr, saddr, argp->ex_addrlen)))
goto out;
+ if (saddr->sa_family > SA_MAX) {
+ error = EINVAL;
+ goto out;
+ }
if (saddr->sa_len > argp->ex_addrlen)
saddr->sa_len = argp->ex_addrlen;
if (argp->ex_masklen) {