⬢ DragonFlyBSD Kernel Audit
DF-2978 / fix.diff
← back to finding ↓ download raw
--- a/sys/kern/uipc_socket.c	2026-10-12 23:59:41.452294599 +0000
+++ b/sys/kern/uipc_socket.c	2026-10-26 00:25:42.793042876 +0000
@@ -2042,11 +2042,11 @@
 	af = kmalloc(sizeof(*af), M_ACCF, M_WAITOK | M_ZERO);
 	if (afp->accf_create != NULL) {
 		if (afap->af_name[0] != '\0') {
-			int len = strlen(afap->af_name) + 1;
+			int len = strlen(afap->af_arg) + 1;
 
 			af->so_accept_filter_str = kmalloc(len, M_ACCF,
 							   M_WAITOK);
-			strcpy(af->so_accept_filter_str, afap->af_name);
+			strlcpy(af->so_accept_filter_str, afap->af_arg, len);
 		}
 		af->so_accept_filter_arg = afp->accf_create(so, afap->af_arg);
 		if (af->so_accept_filter_arg == NULL) {