check header length here, too

diff --git a/src/protocols/dhcpv6/base.c b/src/protocols/dhcpv6/base.c
index bd2281e6e7718eb32eb553a383c9d1dbe30822bb..f72da920cf5c597c81fa150082e35790c9481333 100644 (file)
--- a/src/protocols/dhcpv6/base.c
+++ b/src/protocols/dhcpv6/base.c
@@ -601,6 +601,8 @@ static bool verify_from_client(uint8_t const *packet, size_t packet_len, fr_dhcp
 bool fr_dhcpv6_verify(uint8_t const *packet, size_t packet_len, fr_dhcpv6_decode_ctx_t const *packet_ctx,
                      bool from_server)
 {
+       if (packet_len < DHCPV6_HDR_LEN) return false;
+
        /*
         *      We support up to relaying.
         */