Fix off-by-one bounds check in DHCPv6 FQDN option.

Thanks to Lucas Celant <lcelant@redhat.com> for spotting this.

CVE-2026-93009 may apply.
This commit is contained in:
Simon Kelley committed 2026-10-20 00:07:33 +01:00
1 parent cdbfb97227
commit a627a7847f
1 file changed
+1 -1
+1 -1
View File
@@ -502,7 +502,7 @@ static int dhcp6_no_relay(struct state *state, int msg_type, unsigned char *inbu
state->fqdn_flags &= ~0x04;
if (len != 0 && len < 255)
if (len >= 1 && len < 255)
{
unsigned char *pp, *op = opt6_ptr(opt, 1);
char *pq = daemon->dhcp_buff;