summaryrefslogtreecommitdiff
path: root/sys/dev
diff options
context:
space:
mode:
authorMiod Vallat <miod@cvs.openbsd.org>2004-05-18 11:16:34 +0000
committerMiod Vallat <miod@cvs.openbsd.org>2004-05-18 11:16:34 +0000
commit454f0b2cfcf50c1ac081b8b1fad60e632b818161 (patch)
tree01d6271c4f09d39d3376454dc8f54e142d5dc552 /sys/dev
parent4ac4e54d7aeca8f95a01bdd8c492e789c7000d7c (diff)
Be sure to initalized and use the "len" variable correctly in iestart();
from Thierry Herbelot (%thierry% at herbelot ding com).
Diffstat (limited to 'sys/dev')
-rw-r--r--sys/dev/isa/if_ie.c10
1 files changed, 8 insertions, 2 deletions
diff --git a/sys/dev/isa/if_ie.c b/sys/dev/isa/if_ie.c
index b5ccc4f1fdb..889c51a4fc3 100644
--- a/sys/dev/isa/if_ie.c
+++ b/sys/dev/isa/if_ie.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: if_ie.c,v 1.28 2004/05/12 06:35:11 tedu Exp $ */
+/* $OpenBSD: if_ie.c,v 1.29 2004/05/18 11:16:33 miod Exp $ */
/* $NetBSD: if_ie.c,v 1.51 1996/05/12 23:52:48 mycroft Exp $ */
/*-
@@ -1501,11 +1501,17 @@ iestart(ifp)
sc->xchead);
#endif
+ len = 0;
buffer = sc->xmit_cbuffs[sc->xchead];
- for (m = m0; m != 0; m = m->m_next) {
+
+ for (m = m0; m != NULL && (len + m->m_len) < IE_TBUF_SIZE;
+ m = m->m_next) {
bcopy(mtod(m, caddr_t), buffer, m->m_len);
buffer += m->m_len;
+ len += m->m_len;
}
+ if (m != NULL)
+ printf("%s: tbuf overflow\n", sc->sc_dev.dv_xname);
m_freem(m0);