From c45e2eb865cffd3d2556efc39de02c9b0c56b79b Mon Sep 17 00:00:00 2001 From: Hans Dedecker Date: Thu, 7 Jun 2018 22:36:29 +0200 Subject: [PATCH] dhcpv6: fix out of bounds write in handle_nested_message() Detected by Coverity in CID1412413 Signed-off-by: Hans Dedecker --- src/dhcpv6.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/dhcpv6.c b/src/dhcpv6.c index 4e7d0d0..5549394 100644 --- a/src/dhcpv6.c +++ b/src/dhcpv6.c @@ -174,7 +174,7 @@ enum { }; static void handle_nested_message(uint8_t *data, size_t len, - uint8_t **opts, uint8_t **end, struct iovec iov[IOV_TOTAL - 1]) + uint8_t **opts, uint8_t **end, struct iovec iov[IOV_TOTAL]) { struct dhcpv6_relay_header *hdr = (struct dhcpv6_relay_header*)data; if (iov[IOV_NESTED].iov_base == NULL) { -- 2.30.2