dhcpv6: read the elapsed time and preference options at their real width

print_time() read a 32 bit word out of the Elapsed Time option, which
RFC 8415 21.9 defines as exactly two octets, and clients include it in
almost every message they send. With verbose enabled that is a two byte
read past the option on every DHCPv6 transaction:

  ERROR: AddressSanitizer: heap-buffer-overflow
  READ of size 4 in print_time dhcpv6_packet.c:499

The value was not byte swapped either, so what got logged was not the
elapsed time. Read two octets, convert them, and copy them out rather
than dereferencing a pointer into the packet that need not be aligned.

print_uint8() has the same shape, so check the length there too before
reading the Preference octet.

0 files changed, 0 insertions, 0 deletions