⬢ DragonFlyBSD Kernel Audit
DF-3512 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
--- a/sys/netgraph7/bluetooth/drivers/bt3c/ng_bt3c_pccard.c
+++ b/sys/netgraph7/bluetooth/drivers/bt3c/ng_bt3c_pccard.c
@@ -434,6 +434,10 @@
 			break;
 
 		case NGM_BT3C_NODE_GET_QLEN:
+			if (msg->header.arglen != sizeof(ng_bt3c_node_qlen_ep)) {
+				error = EMSGSIZE;
+				break;
+			}
 			NG_MKRESPONSE(rsp, msg, sizeof(ng_bt3c_node_qlen_ep),
 				M_WAITOK | M_NULLOK);
 			if (rsp == NULL) {