Potential DHCP crash

Sylvain Galliano sylvain.galliano at efficientip.com
Mon Dec 8 08:55:18 UTC 2008


Hi,

I've found a case when the DHCP (3.1.1) server may crash reading an
already freed memory block.
In the loop checking for all IOs, if an IO is freed, the 'next' pointer
become invalid (omapi/dispatch.c)

Regards
Sylvain

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: dhcpd.patch
URL: <https://lists.isc.org/pipermail/dhcp-workers/attachments/20081208/e7a28ff7/attachment.ksh>


More information about the dhcp-workers mailing list