From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 21 Jan 2021 20:38:57 +0000 (-0500)
Subject: check header length here, too
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b5c8dca85f6a8b91cb2bc304505c3146a0bd920b;p=thirdparty%2Ffreeradius-server.git

check header length here, too
---

diff --git a/src/protocols/dhcpv6/base.c b/src/protocols/dhcpv6/base.c
index bd2281e6e77..f72da920cf5 100644
--- a/src/protocols/dhcpv6/base.c
+++ b/src/protocols/dhcpv6/base.c
@@ -601,6 +601,8 @@ static bool verify_from_client(uint8_t const *packet, size_t packet_len, fr_dhcp
 bool fr_dhcpv6_verify(uint8_t const *packet, size_t packet_len, fr_dhcpv6_decode_ctx_t const *packet_ctx,
 		      bool from_server)
 {
+	if (packet_len < DHCPV6_HDR_LEN) return false;
+
 	/*
 	 *	We support up to relaying.
 	 */