[people/pmueller/ipfire-2.x.git] / src / patches / dhcpcd-1.3.22-pl4_corrupt-packet.patch

Fix for CAN-2005-1848 borrowed from gentoo / debian\r
--- client.c.orig	2005-07-10 10:16:43.000000000 +0100\r
+++ client.c	2005-07-10 10:22:31.000000000 +0100\r
@@ -129,6 +129,8 @@\r
        	default:\r
 	  if ( p[1] )\r
 	    {\r
+	      if (p + 2 + p[1] >= end)\r
+		  goto swend; /* Corrupt packet */\r
 	      if ( DhcpOptions.len[*p] == p[1] )\r
 	        memcpy(DhcpOptions.val[*p],p+2,p[1]);\r
 	      else\r
Commit	Line	Data
cd1a2927 MT	1	Fix for CAN-2005-1848 borrowed from gentoo / debian\r
	2	--- client.c.orig 2005-07-10 10:16:43.000000000 +0100\r
	3	+++ client.c 2005-07-10 10:22:31.000000000 +0100\r
	4	@@ -129,6 +129,8 @@\r
	5	default:\r
	6	if ( p[1] )\r
	7	{\r
	8	+ if (p + 2 + p[1] >= end)\r
	9	+ goto swend; /* Corrupt packet */\r
	10	if ( DhcpOptions.len[*p] == p[1] )\r
	11	memcpy(DhcpOptions.val[*p],p+2,p[1]);\r
	12	else\r