[Midnightbsd-cvs] [MidnightBSD/src] e3af26: When parsing option 119 data, dhclient(8) computes...

[Lucas Holt]

  Branch: refs/heads/stable/1.2
  Home:   https://github.com/MidnightBSD/src
  Commit: e3af26a98102f0bcbcfa630ae9ed5e54a0c9ef3b
      https://github.com/MidnightBSD/src/commit/e3af26a98102f0bcbcfa630ae9ed5e54a0c9ef3b
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2020-09-02 (Wed, 02 Sep 2020)

  Changed paths:
    M sbin/dhclient/options.c

  Log Message:
  -----------
  When parsing option 119 data, dhclient(8) computes the uncompressed domain
list length so that it can allocate an appropriately sized buffer to store
the uncompressed list.  The code to compute the length failed to handle
certain malformed input, resulting in a heap overflow when the uncompressed
list is copied into in inadequately sized buffer.