Commit fbbc1454 authored by Simon Kelley's avatar Simon Kelley

Fix off-by-one in DHCPv6 FQDN option decoding.

parent 5ef33279
...@@ -353,7 +353,7 @@ static int dhcp6_no_relay(int msg_type, struct in6_addr *link_address, struct dh ...@@ -353,7 +353,7 @@ static int dhcp6_no_relay(int msg_type, struct in6_addr *link_address, struct dh
char *pq = daemon->dhcp_buff; char *pq = daemon->dhcp_buff;
pp = op; pp = op;
while (*op != 0 && ((op + (*op) + 1) - pp) < len) while (*op != 0 && ((op + (*op)) - pp) < len)
{ {
memcpy(pq, op+1, *op); memcpy(pq, op+1, *op);
pq += *op; pq += *op;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment