⬢ DragonFlyBSD Kernel Audit
DF-0832 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
diff --git a/sys/vfs/udf/udf_vnops.c b/sys/vfs/udf/udf_vnops.c
--- a/sys/vfs/udf/udf_vnops.c
+++ b/sys/vfs/udf/udf_vnops.c
@@ -1101,7 +1101,7 @@
 		do {
 			offset -= icblen;
 			ad_offset = sizeof(struct short_ad) * ad_num;
-			if (ad_offset > fentry->l_ad) {
+			if (ad_offset >= fentry->l_ad) {
 				kprintf("File offset out of bounds\n");
 				return(EINVAL);
 			}
@@ -1125,7 +1125,7 @@
 		do {
 			offset -= icblen;
 			ad_offset = sizeof(struct long_ad) * ad_num;
-			if (ad_offset > fentry->l_ad) {
+			if (ad_offset >= fentry->l_ad) {
 				kprintf("File offset out of bounds\n");
 				return(EINVAL);
 			}