dhcpcd.git, branch dhcpcd-6 DHCP / IPv4LL / IPv6RA / DHCPv6 client auth: Fix consttime_memequal test 2020-08-20T14:49:52+00:00 Jarvis Tseng jarvistseng6@gmail.com 2020-08-20T14:49:52+00:00 76715a01b41e162fbf909555865e4f3700419e7c 






Release dhcpcd-6.11.7
2019-05-04T09:15:47+00:00

Roy Marples
roy@marples.name

2019-05-04T09:12:53+00:00

32ecbd429a7b3911b6763cb4e4b06b0b40f84270












Remove old check
2019-05-04T09:12:39+00:00

Roy Marples
roy@marples.name

2019-05-04T09:12:39+00:00

8c91009085b337e1edc54fdece26b7b5327fc8da












DHCPv6: Fix a potential read overflow with D6_OPTION_PD_EXCLUDE
2019-05-04T09:05:40+00:00

Roy Marples
roy@marples.name

2019-05-03T13:44:06+00:00

588aee42c5116573531ef83f5a3c28cd61126f38

dhcpcd only checks that the prefix length of the exclusion
matches the prefix length of the ia and equals the length of the
data in the option.
This could potentially overrun the in6_addr structure.

This is fixed by enforcing RFC 6603 section 4.2 option limits
more clearly.

Thanks to Maxime Villard <max@m00nbsd.net> for finding this.





dhcpcd only checks that the prefix length of the exclusion
matches the prefix length of the ia and equals the length of the
data in the option.
This could potentially overrun the in6_addr structure.

This is fixed by enforcing RFC 6603 section 4.2 option limits
more clearly.

Thanks to Maxime Villard <max@m00nbsd.net> for finding this.







Allow make distinfo to work once more.
2019-04-26T14:23:22+00:00

Roy Marples
roy@marples.name

2019-04-26T14:23:22+00:00

9dbef10132b921bfe5379d22f81b349dd38aaa99












Release dhcpcd-6.11.6
2019-04-26T14:18:15+00:00

Roy Marples
roy@marples.name

2019-04-26T14:18:15+00:00

c7814a6db2aa1f3cb931ff2afedb862186498f1a












auth: Use consttime_memequal(3) to compare hashes
2019-04-26T14:16:44+00:00

Roy Marples
roy@marples.name

2019-04-26T14:16:44+00:00

e33994fe9a89da3d143b1e1f63a47a336328b2c2

This stops any attacker from trying to infer secrets from latency.

Thanks to Maxime Villard <max@m00nbsd.net>





This stops any attacker from trying to infer secrets from latency.

Thanks to Maxime Villard <max@m00nbsd.net>







DHCP: Fix a potential 1 byte read overflow with DHO_OPTSOVERLOADED
2019-04-24T11:35:34+00:00

Roy Marples
roy@marples.name

2019-04-24T11:35:34+00:00

6adf6108ddb8d3e898aa715edfbaab0a900b4f8d

This fix basically moves the option length check up and also
corrects off by one error with it.

Thanks to Maxime Villard <max@m00nbsd.net>





This fix basically moves the option length check up and also
corrects off by one error with it.

Thanks to Maxime Villard <max@m00nbsd.net>







Fix build.
2017-03-27T15:45:49+00:00

Roy Marples
roy@marples.name

2017-03-27T15:45:49+00:00

c071bfc46fb57fd91b5731272c7bd8be052cc0f0












Fix a potential crash where the DHCP state could be freed during processing.
2017-03-27T15:43:26+00:00

Roy Marples
roy@marples.name

2017-03-27T15:01:52+00:00

229e6ce549bfc738c7d09a98dc3dc77a716dc18e