Feed
OpenBSD

OpenBSD's DHCP client read past its nameserver list when a lease sent too many

Brief

It only fires in verbose debug logging.

Notes

source-changes (florian, 2026-08-14 09:57:30). One file, sbin/dhcpleased/engine.c. “Prevent read buffer overflow in verbose debug logging.” The loop was bounded by the whole buffer size, not the number of nameservers. Trigger is more than eight nameservers in a lease.

Pointed out by Stuart Thomas. No ok line in the mail.

cvsweb engine.c. GitHub and Codeberg had not mirrored it. Do not invent a SHA. Not labeled SECURITY FIX. Not on errata79 as of the file.

Commit msg162762

Sources