Module Name: src
Committed By: alnsn
Date: Wed Aug 15 20:59:51 UTC 2012
Modified Files:
src/sys/net: bpf.c
Log Message:
Fix two bugs introduced by recent commit.
- When handling contiguous buffer in _bpf_tap(), pass its real size
rather than 0 to avoid reading packet data as mbuf struct on
out-of-bounds loads.
- Correctly pass pktlen and buflen arguments from bpf_deliver() to
bpf_filter() to avoid reading mbuf struct as packet data.
JIT case is still broken.
Also, test pointers againts NULL.
To generate a diff of this commit:
cvs rdiff -u -r1.170 -r1.171 src/sys/net/bpf.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
