When parsing option 40 (network information service domain) the
option length is in variable 'oplen' and not in 'size'.

Addresses-Coverity-ID: 492765 Uninitialized variables (UNINIT)
Fixes: 8ab388bfdbcf ("net: add support to parse the NIS domain for the dhcp 
options")
Signed-off-by: Heinrich Schuchardt <heinrich.schucha...@canonical.com>
---
 net/bootp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/net/bootp.c b/net/bootp.c
index c15472f5d37..86c56803c76 100644
--- a/net/bootp.c
+++ b/net/bootp.c
@@ -886,7 +886,7 @@ static void dhcp_process_options(uchar *popt, uchar *end)
                case 40:        /* NIS Domain name */
                        if (net_nis_domain[0] == 0) {
                                size = truncate_sz("NIS Domain Name",
-                                       sizeof(net_nis_domain), size);
+                                       sizeof(net_nis_domain), oplen);
                                memcpy(&net_nis_domain, popt + 2, size);
                                net_nis_domain[size] = 0;
                        }
-- 
2.43.0

Reply via email to