anchao opened a new pull request, #3898: URL: https://github.com/apache/nuttx-apps/pull/3898
## Summary
Harden DHCPv6 client result parsing against malformed options from a
malicious DHCPv6 server.
The result path trusted stored IA_NA, IA_PD, and DNS option data before
copying fixed-size IPv6 addresses into the reported client state. A truncated
IA option or missing/short DNS option could trigger an out-of-bounds read or
NULL pointer dereference.
## Changes
- Validate stored IA_NA address options before reading the IPv6 address
field.
- Validate stored IA_PD prefix options before reading the prefix and IPv6
address fields.
- Only copy DNS server data when at least one complete IPv6 address is
present.
- Skip malformed stored options instead of consuming short buffers.
## Testing
sim/pktradio
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
