cvs commit: src/sys/kern uipc_syscalls.c

[Robert Watson]

rwatson     2008-05-22 07:18:54 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             uipc_syscalls.c 
  Log:
  When sendto(2) is called with an explicit destination address
  argument, call mac_socket_check_connect() on that address before
  proceeding with the send.  Otherwise policies instrumenting the
  connect entry point for the purposes of checking destination
  addresses will not have the opportunity to check implicit
  connect requests.
  
  MFC after:      3 weeks
  Sponsored by:   nCircle Network Security, Inc.
  
  Revision  Changes    Path
  1.272     +5 -1      src/sys/kern/uipc_syscalls.c