From b8f45801b07022c3029de3e880b9e96a977c992f Mon Sep 17 00:00:00 2001 From: Shteryana Shopova Date: Sun, 3 Dec 2006 21:50:57 +0000 Subject: Fix SIOCGDRVSPEC/BRDGGIFSSTP ioctl: make it copyin() the user provided buffer length before trying to use it. Reviewed by: thompsa Approved by: bz (mentor) MFC after: 3 days --- sys/net/if_bridge.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/net') diff --git a/sys/net/if_bridge.c b/sys/net/if_bridge.c index c88ec83d8bdf..7118b2e01cc5 100644 --- a/sys/net/if_bridge.c +++ b/sys/net/if_bridge.c @@ -421,7 +421,7 @@ const struct bridge_control bridge_control_table[] = { BC_F_COPYOUT }, { bridge_ioctl_gifsstp, sizeof(struct ifbpstpconf), - BC_F_COPYOUT }, + BC_F_COPYIN|BC_F_COPYOUT }, { bridge_ioctl_sproto, sizeof(struct ifbrparam), BC_F_COPYIN|BC_F_SUSER }, -- cgit v1.3