summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJannis Achstetter <[email protected]>2023-02-04 22:37:39 +0100
committerJannis Achstetter <[email protected]>2023-02-04 22:37:39 +0100
commit830849211d866fcafef555269b1376f15802cc68 (patch)
tree16b38777d63b53c6b753ae3ffaf047b97cf8dd19
parent4c03a9f85573c58d4c1415ab203278451ad568e8 (diff)
dhserver: Fix a potential DoS vulnerability accidentially introduced by #1712
-rw-r--r--lib/networking/dhserver.c8
1 files changed, 6 insertions, 2 deletions
diff --git a/lib/networking/dhserver.c b/lib/networking/dhserver.c
index def431f75..8cd22ddb9 100644
--- a/lib/networking/dhserver.c
+++ b/lib/networking/dhserver.c
@@ -86,7 +86,7 @@ typedef struct
uint8_t dp_giaddr[4]; /* gateway IP address */
uint8_t dp_chaddr[16]; /* client hardware address */
uint8_t dp_legacy[192];
- uint8_t dp_magic[4];
+ uint8_t dp_magic[4];
uint8_t dp_options[275]; /* options area */
} DHCP_TYPE;
@@ -242,7 +242,11 @@ static void udp_recv_proc(void *arg, struct udp_pcb *upcb, struct pbuf *p, const
memcpy(&dhcp_data, p->payload, n);
ptr = find_dhcp_option(dhcp_data.dp_options, sizeof(dhcp_data.dp_options), DHCP_MESSAGETYPE);
- if (ptr == NULL) return;
+ if (ptr == NULL)
+ {
+ pbuf_free(p);
+ return;
+ }
switch (ptr[2])
{