Files
Ahmed Arif ed367320c2 [DHCPCSVC] Fix DHCP option stack overflow (#9056)
Reject malformed DHCP subnet mask and router option lengths
before setup_adapter() consumes them.

This prevents attacker-controlled option lengths from expanding DHCP
option bytes into a fixed stack buffer while preserving valid
router address lists.

Validate the option lengths before use, keep router lists limited to
complete IPv4 addresses, and format registry IPv4 strings with
RtlIpv4AddressToStringA().

Booted amd64 QEMU image: no DHCP/client networking regression observed.
2026-07-30 18:20:50 +03:00
..
2026-03-01 10:38:42 +02:00
2025-07-31 16:00:13 +03:00
2024-10-10 22:44:46 +02:00