OpenBSD's DHCP client read past its nameserver list when a lease sent too many
Brief
It only fires in verbose debug logging.
Notes
source-changes (florian, 2026-08-14 09:57:30). One file, sbin/dhcpleased/engine.c. “Prevent read buffer overflow in verbose debug logging.” The loop was bounded by the whole buffer size, not the number of nameservers. Trigger is more than eight nameservers in a lease.
Pointed out by Stuart Thomas. No ok line in the mail.
cvsweb engine.c. GitHub and Codeberg had not mirrored it. Do not invent a SHA. Not labeled SECURITY FIX. Not on errata79 as of the file.
Commit msg162762