Author: tsoome
Date: Wed May 10 15:35:41 2017
New Revision: 318142
URL: https://svnweb.freebsd.org/changeset/base/318142

Log:
  libstand: NULL pointer dereference in rarp
  
  readether argument is missing & operator.
  
  CID:          1374944
  Reported by:  Coverity, cem
  Reviewed by:  cem
  Differential Revision:        https://reviews.freebsd.org/D10663

Modified:
  head/lib/libstand/rarp.c

Modified: head/lib/libstand/rarp.c
==============================================================================
--- head/lib/libstand/rarp.c    Wed May 10 15:27:36 2017        (r318141)
+++ head/lib/libstand/rarp.c    Wed May 10 15:35:41 2017        (r318142)
@@ -155,7 +155,7 @@ rarprecv(struct iodesc *d, void **pkt, v
                printf("rarprecv: ");
 #endif
 
-       n = readether(d, ptr, (void **)&ap, tleft, &etype);
+       n = readether(d, &ptr, (void **)&ap, tleft, &etype);
        errno = 0;      /* XXX */
        if (n == -1 || n < sizeof(struct ether_arp)) {
 #ifdef RARP_DEBUG
_______________________________________________
svn-src-all@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to