upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-03 22:02:58 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

pf: fix pf_nv##_array() size check

Browse source 
We want to set the maximum number of elements we'll accept, not the
exact number we need.

MFC after:	3 weeks
Sponsored by:	Orange Business Services

(cherry picked from commit 76c8f202a4)
This commit is contained in:
Kristof Provost 2023-05-15 19:40:32 +02:00 committed by Franco Fichtner
parent 3938f80d5b
commit cf0d42d1ca
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sys/netpfil/pf/pf_nv.c
View file

@ -77,7 +77,7 @@ __FBSDID("$FreeBSD$");
if (! nvlist_exists_number_array(nvl, name)) \
return (EINVAL); \
n = nvlist_get_number_array(nvl, name, &nitems); \
if (nitems != maxelems) \
if (nitems > maxelems) \
return (E2BIG); \
if (nelems != NULL) \
*nelems = nitems; \