Potential DHCP crash

Sylvain Galliano sylvain.galliano at efficientip.com
Mon Dec 8 08:55:18 UTC 2008


I've found a case when the DHCP (3.1.1) server may crash reading an
already freed memory block.
In the loop checking for all IOs, if an IO is freed, the 'next' pointer
become invalid (omapi/dispatch.c)


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: dhcpd.patch
URL: <https://lists.isc.org/pipermail/dhcp-workers/attachments/20081208/e7a28ff7/attachment.ksh>

More information about the dhcp-workers mailing list