svn commit: r230981 - head/sys/kern

[Hiroki Sato]

Author: hrs
Date: Sat Feb  4 15:00:26 2012
New Revision: 230981
URL: http://svn.freebsd.org/changeset/base/230981

Log:
  Fix input validation in SO_SETFIB.
  
  Reviewed by:	bz
  MFC after:	1 day

Modified:
  head/sys/kern/uipc_socket.c

Modified: head/sys/kern/uipc_socket.c
==============================================================================
--- head/sys/kern/uipc_socket.c	Sat Feb  4 13:45:39 2012	(r230980)
+++ head/sys/kern/uipc_socket.c	Sat Feb  4 15:00:26 2012	(r230981)
@@ -2498,7 +2498,7 @@ sosetopt(struct socket *so, struct socko
 		case SO_SETFIB:
 			error = sooptcopyin(sopt, &optval, sizeof optval,
 					    sizeof optval);
-			if (optval < 0 || optval > rt_numfibs) {
+			if (optval < 0 || optval >= rt_numfibs) {
 				error = EINVAL;
 				goto bad;
 			}