On Fri, 07 Aug 2026 16:52:21 +0200, Shahriyar Jalayeri wrote:
> dhcp6_parse_ia_options() walks the sub-options encapsulated in a received
> IA_NA / IA_TA option and advances its cursor by the sub-option's declared
> length alone. A sub-option with a length of zero never advances the
> cursor, so the while loop spins forever and the DHCPv6 client hangs. The
> advance also omits the sub-option header, so it is short even for
> well-formed options.
>
> [...]
Applied to u-boot-net branch for-main, thanks!
[1/2] net: dhcp6: prevent an infinite loop parsing IA options
(no commit info)
Best regards,
--
Jerome Forissier <[email protected]>
