]>
Commit | Line | Data |
---|---|---|
cd1a2927 MT |
1 | Fix for CAN-2005-1848 borrowed from gentoo / debian\r |
2 | --- client.c.orig 2005-07-10 10:16:43.000000000 +0100\r | |
3 | +++ client.c 2005-07-10 10:22:31.000000000 +0100\r | |
4 | @@ -129,6 +129,8 @@\r | |
5 | default:\r | |
6 | if ( p[1] )\r | |
7 | {\r | |
8 | + if (p + 2 + p[1] >= end)\r | |
9 | + goto swend; /* Corrupt packet */\r | |
10 | if ( DhcpOptions.len[*p] == p[1] )\r | |
11 | memcpy(DhcpOptions.val[*p],p+2,p[1]);\r | |
12 | else\r |