From c47e4f59ef87ef94b84023e260bfadd9df6e5a82 Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Thu, 28 Jan 2016 22:45:39 +0000 Subject: [PATCH] Fix end pointer passed from dhcpv6_handle_reply() to dhcpv6_parse_ia() The end of the IA option is odata + olen; there's no need to add anything. Signed-off-by: Ben Hutchings --- src/dhcpv6.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/dhcpv6.c b/src/dhcpv6.c index e27d899..c5f11f1 100644 --- a/src/dhcpv6.c +++ b/src/dhcpv6.c @@ -989,7 +989,7 @@ static int dhcpv6_handle_reply(enum dhcpv6_msg orig, _unused const int rc, if (code != DHCPV6_Success) continue; - dhcpv6_parse_ia(ia_hdr, odata + olen + sizeof(*ia_hdr)); + dhcpv6_parse_ia(ia_hdr, odata + olen); passthru = false; } else if (otype == DHCPV6_OPT_STATUS && olen >= 2) { uint8_t *mdata = (olen > 2) ? &odata[2] : NULL; -- 2.25.1