svn commit: r201520 - head/usr.sbin/rtsold

Xin LI delphij at FreeBSD.org
Mon Jan 4 18:04:37 UTC 2010


Author: delphij
Date: Mon Jan  4 18:04:36 2010
New Revision: 201520
URL: http://svn.freebsd.org/changeset/base/201520

Log:
  Test index value is within the range before using it to reference
  array member.
  
  PR:		bin/141838
  Submitted by:	Henning Petersen <henning.petersen at t-online.de>
  MFC after:	2 weeks

Modified:
  head/usr.sbin/rtsold/probe.c

Modified: head/usr.sbin/rtsold/probe.c
==============================================================================
--- head/usr.sbin/rtsold/probe.c	Mon Jan  4 17:28:59 2010	(r201519)
+++ head/usr.sbin/rtsold/probe.c	Mon Jan  4 18:04:36 2010	(r201520)
@@ -118,7 +118,7 @@ defrouter_probe(struct ifinfo *ifinfo)
 		goto closeandend;
 	}
 
-	for (i = 0; dr.defrouter[i].if_index && i < PRLSTSIZ; i++) {
+	for (i = 0; i < DRLSTSIZ && dr.defrouter[i].if_index; i++) {
 		if (ifindex && dr.defrouter[i].if_index == ifindex) {
 			/* sanity check */
 			if (!IN6_IS_ADDR_LINKLOCAL(&dr.defrouter[i].rtaddr)) {


More information about the svn-src-head mailing list