Fix dhclient heap overflow.

Approved by: so Security: FreeBSD-SA-20:26.dhclient Security: CVE-2020-7461
2020-09-02 16:25:31 +00:00 · 2020-09-02 16:25:31 +00:00 · 3ccb89bbf7
parent 47b536fd85
commit 3ccb89bbf7
1 changed files with 2 additions and 0 deletions
--- a/sbin/dhclient/options.c
+++ b/sbin/dhclient/options.c
@ -298,6 +298,8 @@ find_search_domain_name_len(struct option_data *option, size_t *offset)

 			pointed_len = find_search_domain_name_len(option,
 			    &pointer);
+			if (pointed_len < 0)
+				return (-1);
 			domain_name_len += pointed_len;

 			*offset = i + 2;