⬢ DragonFlyBSD Kernel Audit
DF-0509 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
diff --git a/sys/netgraph/ksocket/ng_ksocket.c b/sys/netgraph/ksocket/ng_ksocket.c
--- a/sys/netgraph/ksocket/ng_ksocket.c
+++ b/sys/netgraph/ksocket/ng_ksocket.c
@@ -653,6 +653,7 @@
 
 			/* Sanity check */
 			if (msg->header.arglen < SADATA_OFFSET
+			    || sa->sa_len < SADATA_OFFSET
 			    || msg->header.arglen < sa->sa_len)
 				ERROUT(EINVAL);
 			if (so == NULL)
@@ -715,6 +716,7 @@
 
 			/* Sanity check */
 			if (msg->header.arglen < SADATA_OFFSET
+			    || sa->sa_len < SADATA_OFFSET
 			    || msg->header.arglen < sa->sa_len)
 				ERROUT(EINVAL);
 			if (so == NULL)