Mirrors_Framework/nuttx
1
0
Fork 0
mirror of https://github.com/apache/nuttx.git synced 2026-05-31 14:27:37 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

net/icmpv6: fix wrong logical operator in recvmsg validation

Browse Source 
Change && to || in the fromlen validation of icmpv6_recvmsg().
The original condition (fromlen == NULL && *fromlen < sizeof(...))
would never be true when fromlen is NULL due to short-circuit
evaluation. The correct logic is: reject if fromlen is NULL or
the buffer is too small.

Signed-off-by: zhanghongyu <zhanghongyu@xiaomi.com>
This commit is contained in:
zhanghongyu
2026-04-13 14:36:14 +08:00
committed by Alan C. Assis
parent 0c7f8204fd
commit 6cba2674fa
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
net/icmpv6/icmpv6_recvmsg.c
+1 -1
View File
@@ -325,7 +325,7 @@ ssize_t icmpv6_recvmsg(FAR struct socket *psock, FAR struct msghdr *msg,
if (from != NULL) if (from != NULL)
{ {
if (fromlen == NULL && *fromlen < sizeof(struct sockaddr_in6)) if (fromlen == NULL || *fromlen < sizeof(struct sockaddr_in6))
{ {
return -EINVAL; return -EINVAL;
} }