Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Sep 2002 15:16:12 -0700 (PDT)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 17673 for review
Message-ID:  <200209182216.g8IMGC2n089489@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=17673

Change 17673 by rwatson@rwatson_paprika on 2002/09/18 15:15:59

	Add a missing MAC check for the BPF code; not clear if this
	was lost during an integ, or a victim of moving source code
	in -current.
	
	Pointed out by:	phk

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/net/bpf.c#16 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/net/bpf.c#16 (text+ko) ====

@@ -1137,7 +1137,11 @@
 		++d->bd_rcount;
 		slen = bpf_filter(d->bd_filter, (u_char *)m, pktlen, 0);
 		if (slen != 0)
-			catchpacket(d, (u_char *)m, pktlen, slen, bpf_mcopy);
+#ifdef MAC
+			if (mac_check_bpfdesc_receive(d, ifp) == 0)
+#endif
+				catchpacket(d, (u_char *)m, pktlen, slen,
+				    bpf_mcopy);
 		BPFD_UNLOCK(d);
 	}
 	BPFIF_UNLOCK(bp);

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe p4-projects" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209182216.g8IMGC2n089489>