CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2022/02/13 16:11:10
Modified files:
sys/net : bpf.c
Log message:
The length value in bpf_movein() is casted to from size_t to u_int
and then rounded before checking. Put the same check before the
calculations to avoid overflow.
Reported-by: syzbot+6f29d23eca959c5a9...@syzkaller.appspotmail.com
OK claudio@
