diff options
| author |   patrick <patrick@openbsd.org> | 2019-05-10 18:30:15 +0000 |
|---|---|---|
| committer | patrick <patrick@openbsd.org> | 2019-05-10 18:30:15 +0000 |
| commit | 4e00b90330e1e472a3ab41a7029f69a27eda9eb8 (patch) | |
| tree | b19636e828b238c91a1072e2392d769aed19ec21 /sys/dev/pci/drm/drm_linux.c | |
| parent | Document port protection support in switch(4). Also add SIOCBRDGSIFPROT to (diff) | |
| download | wireguard-openbsd-4e00b90330e1e472a3ab41a7029f69a27eda9eb8.tar.xz wireguard-openbsd-4e00b90330e1e472a3ab41a7029f69a27eda9eb8.zip | |
On the transmit path the ethernet and ip headers might not be
in contiguous memory. Taking the pointer to the data and simply
looking at the IP header by adding an offset can lead to an out-
of-bounds access. Make the ieee80211 classify function copy the
ethernet and ip header into stack variables to fix it.
Fixes a panic for florian@
Discussed with claudio@
ok stsp@
Diffstat (limited to 'sys/dev/pci/drm/drm_linux.c')
0 files changed, 0 insertions, 0 deletions