mirror of
http://thekelleys.org.uk/git/dnsmasq.git
synced 2026-10-14 10:29:33 +00:00
2d0e0c7a54f73d10d7afa15691c08cf5ec1e4ee2
RFC 8415 doesn't exclude the possiblity that a relay-forward message could contain _more_than_one relay-message option. The existing code could, under certain circumstances, access freed stack memory in this case. Thanks to Dejan Alvadzijevic and his fuzzer for finding this condition. This patch fixes things so that dnsmasq does at least sensible things with multiple relay-message options, and no longer has the (remote) possibility of accessing dead memory.
Languages
C
94.3%
Perl
2.2%
HTML
1.2%
Shell
1%
Makefile
0.6%
Other
0.6%