dhcpv6: check option length before reading the status code

print_status() reads the 2-byte status code at offset 4 of the option,
but parse_option() only guarantees that the option header plus its
declared payload length are within the packet. A Status Code option with
a payload length below 2 as the last option in a packet therefore made
print_status() read past the end of the received buffer.

Skip the option if its payload is too short to hold the code.

0 files changed, 0 insertions, 0 deletions