diff options
| author | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2001-06-24 21:16:03 +0000 |
|---|---|---|
| committer | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2001-06-24 21:16:03 +0000 |
| commit | 7940897d3a09d327f65390cc393a2d9892fd4304 (patch) | |
| tree | 6c542313c6532f9f28170bc66391f12e302a3e2e /sys/net/pf.c | |
| parent | b65d5a235135b3ff5d92a6874fc533696ec7f25c (diff) | |
on pull_hdr(), check short m->m_pkthdr.len. fix mesasge (it's not the first
fragment, it's too short packet)
Diffstat (limited to 'sys/net/pf.c')
| -rw-r--r-- | sys/net/pf.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/net/pf.c b/sys/net/pf.c index 617f3986a20..adc1f153b49 100644 --- a/sys/net/pf.c +++ b/sys/net/pf.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf.c,v 1.5 2001/06/24 21:10:24 itojun Exp $ */ +/* $OpenBSD: pf.c,v 1.6 2001/06/24 21:16:02 itojun Exp $ */ /* * Copyright (c) 2001, Daniel Hartmeier @@ -1613,9 +1613,9 @@ pull_hdr(struct ifnet *ifp, struct mbuf **m, struct ip *h, int off, int *action, } return NULL; } - if ((h->ip_len - off) < len) { + if ((*m)->m_pkthdr.len < off + len || h->ip_len < off + len) { *action = PF_DROP; - printf("packetfilter: dropping first fragment"); + printf("packetfilter: dropping short packet"); print_ip(ifp, h); return NULL; } |