Fix a potential crash where the DHCP state could be freed during processing.

diff --git a/src/dhcp.c b/src/dhcp.c
index f6b3104e40eea6d02a97221e5c703dd4aaf412ab..0e32665e0fcfbe65b08af3479347bd6cdebb19e8 100644 (file)
--- a/src/dhcp.c
+++ b/src/dhcp.c
@@ -3267,6 +3267,9 @@ dhcp_readpacket(void *arg)
                        return;
                }
                dhcp_handlepacket(ifp, buf, (size_t)bytes, flags);
+               /* Check we still have a state after processing. */
+               if ((state = D_CSTATE(ifp)) == NULL || state->bpf_fd == -1)
+                       break;
        }
 }