[Openib-windows] Possible buffer over run caused by a malformed	dhcp packet.
    Fabian Tillier 
    ftillier at silverstorm.com
       
    Wed Mar  8 09:18:33 PST 2006
    
    
  
On 3/8/06, Tzachi Dar <tzachid at mellanox.co.il> wrote:
>
> Hi Fab,
>
> While reading the code of the function __send_mgr_filter_dhcp I got to think
> that there might be a problem of a possible buffer overrun caused by the
> loop:
Yes, I think you're right.  A malformed DHCP packet that is missing
the end marker would cause a buffer overrun.  I'll code up a fix for
this and check it in.
Thanks for finding this!
- Fab
    
    
More information about the ofw
mailing list