diff options
| author |   itojun <itojun@openbsd.org> | 2000-01-04 16:03:00 +0000 |
|---|---|---|
| committer | itojun <itojun@openbsd.org> | 2000-01-04 16:03:00 +0000 |
| commit | 398519f11599d978236c579bc715063b07734c55 (patch) | |
| tree | 8e63b8488fae7efcec0990c1ef648154af6b1810 | |
| parent | sync (diff) | |
| download | wireguard-openbsd-398519f11599d978236c579bc715063b07734c55.tar.xz wireguard-openbsd-398519f11599d978236c579bc715063b07734c55.zip | |
fix mbuf out-of-bound writes on nfsv2 mounts.
netbsd sys/nfs/nfs_socket.c 1.43 -> 1.44
| -rw-r--r-- | sys/nfs/nfs_socket.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/nfs/nfs_socket.c b/sys/nfs/nfs_socket.c index 7e5c6540813..197ccc61bdd 100644 --- a/sys/nfs/nfs_socket.c +++ b/sys/nfs/nfs_socket.c @@ -1,4 +1,4 @@ -/* $OpenBSD: nfs_socket.c,v 1.15 1999/03/02 20:59:55 millert Exp $ */ +/* $OpenBSD: nfs_socket.c,v 1.16 2000/01/04 16:03:00 itojun Exp $ */ /* $NetBSD: nfs_socket.c,v 1.27 1996/04/15 20:20:00 thorpej Exp $ */ /* @@ -1115,7 +1115,7 @@ nfs_rephead(siz, nd, slp, err, cache, frev, mrq, mbp, bposp) * try and leave leading space for the lower level headers. */ siz += RPC_REPLYSIZ; - if (siz >= MINCLSIZE) { + if (siz >= max_datalen) { MCLGET(mreq, M_WAIT); } else mreq->m_data += max_hdr; |