Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: CVS commit: src/sys/nfs



In article <20060301153012.3D87F2DA27%cvs.netbsd.org@localhost>,
Rui Paulo  <rpaulo%netbsd.org@localhost> wrote:
>
>Module Name:   src
>Committed By:  rpaulo
>Date:          Wed Mar  1 15:30:12 UTC 2006
>
>Modified Files:
>       src/sys/nfs: nfs_socket.c
>
>Log Message:
>From FreeBSD SA-06:10
>       Correct a remote kernel panic when processing zero-length RPC records
>       via TCP.
>
>
                        slp->ns_reclen = recmark & ~0x80000000;
                        [...]
                        if (slp->ns_reclen > NFS_MAXPACKET
                            || slp->ns_reclen <= 0) {
 
How can slp->ns_reclen be negative? I think that you only care about the
0 case, right?

christos




Home | Main Index | Thread Index | Old Index