Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 May 2017 15:35:41 +0000 (UTC)
From:      Toomas Soome <tsoome@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r318142 - head/lib/libstand
Message-ID:  <201705101535.v4AFZfOR009450@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: tsoome
Date: Wed May 10 15:35:41 2017
New Revision: 318142
URL: https://svnweb.freebsd.org/changeset/base/318142

Log:
  libstand: NULL pointer dereference in rarp
  
  readether argument is missing & operator.
  
  CID:		1374944
  Reported by:	Coverity, cem
  Reviewed by:	cem
  Differential Revision:	https://reviews.freebsd.org/D10663

Modified:
  head/lib/libstand/rarp.c

Modified: head/lib/libstand/rarp.c
==============================================================================
--- head/lib/libstand/rarp.c	Wed May 10 15:27:36 2017	(r318141)
+++ head/lib/libstand/rarp.c	Wed May 10 15:35:41 2017	(r318142)
@@ -155,7 +155,7 @@ rarprecv(struct iodesc *d, void **pkt, v
 		printf("rarprecv: ");
 #endif
 
-	n = readether(d, ptr, (void **)&ap, tleft, &etype);
+	n = readether(d, &ptr, (void **)&ap, tleft, &etype);
 	errno = 0;	/* XXX */
 	if (n == -1 || n < sizeof(struct ether_arp)) {
 #ifdef RARP_DEBUG



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201705101535.v4AFZfOR009450>