diff options
| author | Jung-uk Kim <jkim@FreeBSD.org> | 2008-08-29 15:49:40 +0000 |
|---|---|---|
| committer | Jung-uk Kim <jkim@FreeBSD.org> | 2008-08-29 15:49:40 +0000 |
| commit | 37b5fe59b592ef1d1bd61f76768f7d231cd94cdb (patch) | |
| tree | 0d109d5bc0feaa25a237b9244efc220d5224c4b0 /sys/netgraph/ng_bpf.c | |
| parent | df3310e04a9ceac3214c41ba8f4b3cac39e72f45 (diff) | |
Notes
Diffstat (limited to 'sys/netgraph/ng_bpf.c')
| -rw-r--r-- | sys/netgraph/ng_bpf.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/sys/netgraph/ng_bpf.c b/sys/netgraph/ng_bpf.c index 6c4c21269dfe..7d7aa26a2585 100644 --- a/sys/netgraph/ng_bpf.c +++ b/sys/netgraph/ng_bpf.c @@ -104,6 +104,9 @@ static ng_newhook_t ng_bpf_newhook; static ng_rcvdata_t ng_bpf_rcvdata; static ng_disconnect_t ng_bpf_disconnect; +/* Maximum bpf program instructions */ +extern int bpf_maxinsns; + /* Internal helper functions */ static int ng_bpf_setprog(hook_p hook, const struct ng_bpf_hookprog *hp); @@ -560,7 +563,8 @@ ng_bpf_setprog(hook_p hook, const struct ng_bpf_hookprog *hp0) int size; /* Check program for validity */ - if (!bpf_validate(hp0->bpf_prog, hp0->bpf_prog_len)) + if (hp0->bpf_prog_len > bpf_maxinsns || + !bpf_validate(hp0->bpf_prog, hp0->bpf_prog_len)) return (EINVAL); /* Make a copy of the program */ |