D31302.id92761.diff
No OneTemporary
Actions

Size

487 B

Referenced Files

None

Subscribers

None

D31302.id92761.diff
View Options

	diff --git a/sys/netinet/raw_ip.c b/sys/netinet/raw_ip.c
	--- a/sys/netinet/raw_ip.c
	+++ b/sys/netinet/raw_ip.c
	@@ -523,8 +523,15 @@
	} else {
	if (m->m_pkthdr.len > IP_MAXPACKET) {
	m_freem(m);
	- return(EMSGSIZE);
	+ return (EMSGSIZE);
	}
	+ if (m->m_pkthdr.len < sizeof(*ip)) {
	+ m_freem(m);
	+ return (EINVAL);
	+ }
	+ m = m_pullup(m, sizeof(*ip));
	+ if (m == NULL)
	+ return (ENOMEM);
	ip = mtod(m, struct ip *);
	hlen = ip->ip_hl << 2;
	if (m->m_len < hlen) {