[PATCH 2/2] udhcpc6: ignore invalid OPTION_IAADDR

David Decotigny ddecotig at gmail.com
Thu May 24 15:30:16 UTC 2018


Ref: http://go/rfc/3315#section-22.6

Signed-off-by: David Decotigny <ddecotig at gmail.com>
---
 networking/udhcp/d6_dhcpc.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/networking/udhcp/d6_dhcpc.c b/networking/udhcp/d6_dhcpc.c
index 39b0501ad..c6276f97b 100644
--- a/networking/udhcp/d6_dhcpc.c
+++ b/networking/udhcp/d6_dhcpc.c
@@ -288,6 +288,10 @@ static void option_to_env(const uint8_t *option, const uint8_t *option_end)
  * |                        valid-lifetime                         |
  * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  */
+			/* Make sure payload contains an address */
+			if (option[3] < 24)
+				break;
+
 			sprint_nip6(ipv6str, option + 4);
 			*new_env() = xasprintf("ipv6=%s", ipv6str);
 
-- 
2.17.0.441.gb46fe60e1d-goog



More information about the busybox mailing list