Page Menu
Home
FreeBSD
Search
Configure Global Search
Log In
Files
F160594142
D57441.id179213.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Flag For Later
Award Token
Size
651 B
Referenced Files
None
Subscribers
None
D57441.id179213.diff
View Options
diff --git a/sbin/ping/ping6.c b/sbin/ping/ping6.c
--- a/sbin/ping/ping6.c
+++ b/sbin/ping/ping6.c
@@ -273,7 +273,8 @@
struct sockaddr_in6 from, *sin6;
struct addrinfo hints, *res;
struct sigaction si_sa;
- int cc, i;
+ int cc;
+ size_t i;
int almost_done, ch, hold, packlen, preload, optval, error;
int nig_oldmcprefix = -1;
u_char *datap;
@@ -762,7 +763,7 @@
if (!(packet = (u_char *)malloc((u_int)packlen)))
err(1, "Unable to allocate packet");
if (!(options & F_PINGFILLED))
- for (i = ICMP6ECHOLEN; i < packlen; ++i)
+ for (i = ICMP6ECHOLEN; i < ICMP6ECHOLEN + datalen; ++i)
*datap++ = i;
ident = getpid() & 0xFFFF;
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Sat, Jun 27, 12:36 AM (8 h, 38 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
33757007
Default Alt Text
D57441.id179213.diff (651 B)
Attached To
Mode
D57441: ping6: fix outpack overflow in pattern fill loop
Attached
Detach File
Event Timeline
Log In to Comment