shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2024-12-22 13:33:56 +03:00
Code

sd-dhcp-server: refuse too large packet to send

Browse Source 
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44134.
This commit is contained in:
Yu Watanabe 2022-01-28 11:53:49 +09:00 committed by Luca Boccassi
parent a663f5eef5
commit 71df50a973
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/libsystemd-network/sd-dhcp-server.c
View File

@ -319,6 +319,9 @@ static int dhcp_server_send_unicast_raw(
memcpy(link.ll.sll_addr, chaddr, hlen); memcpy(link.ll.sll_addr, chaddr, hlen);
if (len > UINT16_MAX)
return -EOVERFLOW;
dhcp_packet_append_ip_headers(packet, server->address, DHCP_PORT_SERVER, dhcp_packet_append_ip_headers(packet, server->address, DHCP_PORT_SERVER,
packet->dhcp.yiaddr, packet->dhcp.yiaddr,
DHCP_PORT_CLIENT, len, -1); DHCP_PORT_CLIENT, len, -1);

BIN
test/fuzz/fuzz-dhcp-server-relay-message/clusterfuzz-testcase-minimized-fuzz-dhcp-server-relay-message-4972399731277824 Normal file
View File

Binary file not shown.