Potential DHCP crash

[Sylvain Galliano]

Hi,

I've found a case when the DHCP (3.1.1) server may crash reading an
already freed memory block.
In the loop checking for all IOs, if an IO is freed, the 'next' pointer
become invalid (omapi/dispatch.c)

Regards
Sylvain

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: dhcpd.patch
URL: <https://lists.isc.org/pipermail/dhcp-workers/attachments/20081208/e7a28ff7/attachment.ksh>