systemd

mirror of https://github.com/systemd/systemd.git synced 2026-08-05 23:50:42 +00:00

Files

Luca Boccassi 6fa5ebc506 dhcp-client: reject messages larger than the maximum UDP payload

dhcp_message_verify_header() only enforced a lower bound on the input
length, so dhcp_message_parse() happily accepted arbitrarily large
buffers. Such inputs could never have been received via UDP and would
later fail in dhcp_message_build() with -E2BIG once the parsed options'
combined size exceeds UDP_PAYLOAD_MAX_SIZE, which the fuzzer surfaced as
an assertion failure.

Reject inputs above UDP_PAYLOAD_MAX_SIZE up front, so the parse stage
mirrors what the wire format can actually carry.

Follow-up for 8c18bb6547

Fixes https://github.com/systemd/systemd/issues/42147

Co-developed-by: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-19 01:43:25 +09:00

dnr_invalid

network: add missing else in dhcp_lease_load

2024-10-28 20:59:17 -07:00

dnr_v4

test/fuzz: add dnr packets

2024-10-21 09:10:20 -07:00

overload-file-roundtrip

dhcp-client: clear overloaded sname/file fields after parsing

2026-05-18 04:52:25 +09:00

oversized-message

dhcp-client: reject messages larger than the maximum UDP payload