Date: Sat, 07 Dec 2019 03:56:45 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 238022] buffer overrun in function make_request in sbin/dhclient/dhclient.c Message-ID: <bug-238022-227-GDtj99SlnF@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-238022-227@https.bugs.freebsd.org/bugzilla/> References: <bug-238022-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D238022 --- Comment #4 from commit-hook@freebsd.org --- A commit references this bug: Author: emaste Date: Sat Dec 7 03:56:37 UTC 2019 New revision: 355482 URL: https://svnweb.freebsd.org/changeset/base/355482 Log: MFC r238022 (cem): dhclient: fix braino in previous bugfix r300174 The previous revision missed the exact same error in a copy paste block of the same code in another function. Fix the identical case, too. A DHCP client identifier is simply the hardware type (one byte) concatenated with the hardware address (some variable number of bytes, but at most 16). Limit the size of the temporary buffer to match and the rest of the calculations shake out correctly. PR: 238022 Reported by: Young <yangx92 AT hotmail.com> Submitted by: Young <yangx92 AT hotmail.com> Changes: _U stable/12/ stable/12/sbin/dhclient/dhclient.c --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-238022-227-GDtj99SlnF>