Re: [Dnsmasq-discuss] dnsmasq sending truncated DHCPv6 packets

2019-12-03 Thread Simon Kelley
On 29/11/2019 15:55, Derek Higgins wrote: > Hi, > > I've been trying to track down the reason for intermittent PXE > failures while using DHCPv6, > the failed PXE attempts seem to correlate with incomplete dhcp6 > advertise packets. > > e.g. in this sequence, the advertise packet length is 62 (al

Re: [Dnsmasq-discuss] dnsmasq sending truncated DHCPv6 packets

2019-12-03 Thread Simon Kelley
Ignore previous suggestions, I think I see the problem. The code to send a packet is while (retry_send(sendto(daemon->dhcp6fd, daemon->outpacket.iov_base, save_counter(0), 0, (struct sockaddr *)&from, sizeof(from; where the length to send

Re: [Dnsmasq-discuss] CPU spinning bug, possibly related to SSHFP queries

2019-12-03 Thread Simon Kelley
On 30/11/2019 20:55, Simon Kelley wrote: > This makes sense, the code looks like this > > while (crecp = lookup(name)) > { > char *cname_target = cache_get_cname_target(crecp); > > if (some stuff) >{ >other_stuff() >strcpy(name, cname_target); > }

Re: [Dnsmasq-discuss] dnsmasq sending truncated DHCPv6 packets

2019-12-03 Thread Simon Kelley
On 03/12/2019 18:16, Simon Kelley wrote: > Ignore previous suggestions, I think I see the problem. > > The code to send a packet is > > while (retry_send(sendto(daemon->dhcp6fd, daemon->outpacket.iov_base, > save_counter(0), 0, (struct sockaddr *)&from, >

[Dnsmasq-discuss] Segmentation fault when providing invalid --dhcp-match command line option

2019-12-03 Thread Klaus Eisentraut
Hi, I recently did some fuzzing with afl-fuzz in the config file parsing part of dnsmasq. I know it is not very useful, but it was very easy to start with. Anyway, I found a (non-exploitable) crash in dnsmasq which can be triggered by providing an invalid configuration file or an invalid command