From owner-cvs-sys Fri Mar 31 17:46:29 1995 Return-Path: cvs-sys-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id RAA14815 for cvs-sys-outgoing; Fri, 31 Mar 1995 17:46:29 -0800 Received: (from root@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id RAA14805; Fri, 31 Mar 1995 17:46:28 -0800 Date: Fri, 31 Mar 1995 17:46:28 -0800 From: David Greenman Message-Id: <199504010146.RAA14805@freefall.cdrom.com> To: CVS-commiters, cvs-sys Subject: cvs commit: src/sys/net bpf_filter.c Sender: cvs-sys-owner@freebsd.org Precedence: bulk davidg 95/03/31 17:46:28 Modified: sys/net bpf_filter.c Log: Patch from Greg Ansley: In rare cases, when the filter specified accesses an multi-byte value that is split across mbuf's, the value loaded is incorrect. And if you are very unlucky (like me) it will index off the end of the mbuf and into an unallocated page and panic the system. If you look at the code you will discover the the index *k* is added to the pointer *cp* and the used AGAIN as a subscript.