diff options
| author | Philip Guenthe <guenther@cvs.openbsd.org> | 2009-11-21 13:05:33 +0000 |
|---|---|---|
| committer | Philip Guenthe <guenther@cvs.openbsd.org> | 2009-11-21 13:05:33 +0000 |
| commit | 9495e9003ab6bf557833fa1b2641293d748bcd9a (patch) | |
| tree | 815ae731d25a84f7109a260d17e54c18273ae869 /sys/netbt/rfcomm_dlc.c | |
| parent | cb9e8f5ce6398bbf3a336d8b9169f5222ed6501c (diff) | |
User triggerable KASSERT()s and NULL dereferences in netbt setsockopt()s,
found by Clement LECIGNE, localhost DoS everywhere. Also, don't leak
the mbuf when the wrong level is used.
ok claudio@, "just commit" deraadt@
Diffstat (limited to 'sys/netbt/rfcomm_dlc.c')
| -rw-r--r-- | sys/netbt/rfcomm_dlc.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netbt/rfcomm_dlc.c b/sys/netbt/rfcomm_dlc.c index 7777b2b18cb..843474c8ca1 100644 --- a/sys/netbt/rfcomm_dlc.c +++ b/sys/netbt/rfcomm_dlc.c @@ -1,4 +1,4 @@ -/* $OpenBSD: rfcomm_dlc.c,v 1.4 2008/11/22 04:42:58 uwe Exp $ */ +/* $OpenBSD: rfcomm_dlc.c,v 1.5 2009/11/21 13:05:32 guenther Exp $ */ /* $NetBSD: rfcomm_dlc.c,v 1.6 2008/08/06 15:01:24 plunky Exp $ */ /*- @@ -232,7 +232,7 @@ rfcomm_dlc_setmode(struct rfcomm_dlc *dlc) if (dlc->rd_mode & RFCOMM_LM_SECURE) mode |= L2CAP_LM_SECURE; - return l2cap_setopt(dlc->rd_session->rs_l2cap, SO_L2CAP_LM, &mode); + return l2cap_setlinkmode(dlc->rd_session->rs_l2cap, mode); } /* |