upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-11 09:41:03 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Make sure a $PIR table header has a valid length before accepting the table

Browse source 
as valid.

Submitted by:	Michal Mertl <mime@traveller.cz>
This commit is contained in:
John Baldwin 2002-09-09 18:24:35 +00:00
parent ba09ba1fce
commit fefe985dc6
3 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sys/amd64/pci/pci_cfgreg.c
View file

@ -169,7 +169,8 @@ pci_cfgregopen(void)
i < (pt->pt_header.ph_length); i++) {
ck += cv[i];
}
if (ck == 0) {
if (ck == 0 && pt->pt_header.ph_length >
sizeof(struct PIR_header)) {
pci_route_table = pt;
pci_route_count = (pt->pt_header.ph_length -
sizeof(struct PIR_header)) /

3
sys/i386/pci/pci_cfgreg.c
View file

@ -169,7 +169,8 @@ pci_cfgregopen(void)
i < (pt->pt_header.ph_length); i++) {
ck += cv[i];
}
if (ck == 0) {
if (ck == 0 && pt->pt_header.ph_length >
sizeof(struct PIR_header)) {
pci_route_table = pt;
pci_route_count = (pt->pt_header.ph_length -
sizeof(struct PIR_header)) /

3
sys/i386/pci/pci_pir.c
View file

@ -169,7 +169,8 @@ pci_cfgregopen(void)
i < (pt->pt_header.ph_length); i++) {
ck += cv[i];
}
if (ck == 0) {
if (ck == 0 && pt->pt_header.ph_length >
sizeof(struct PIR_header)) {
pci_route_table = pt;
pci_route_count = (pt->pt_header.ph_length -
sizeof(struct PIR_header)) /