D17914.id50243.diff
No OneTemporary
Actions

Size

579 B

Referenced Files

None

Subscribers

None

D17914.id50243.diff
View Options

	Index: head/sys/netinet/ip_reass.c
	===================================================================
	--- head/sys/netinet/ip_reass.c
	+++ head/sys/netinet/ip_reass.c
	@@ -228,6 +228,16 @@
	ip->ip_off = htons(ntohs(ip->ip_off) << 3);

	/*
	+ * Make sure the fragment lies within a packet of valid size.
	+ */
	+ if (ntohs(ip->ip_len) + ntohs(ip->ip_off) > IP_MAXPACKET) {
	+ IPSTAT_INC(ips_toolong);
	+ IPSTAT_INC(ips_fragdropped);
	+ m_freem(m);
	+ return (NULL);
	+ }
	+
	+ /*
	* Attempt reassembly; if it succeeds, proceed.
	* ip_reass() will return a different mbuf.
	*/