ipoe: fix dhcpv4 relay reply packet leak

dhcpv4_relay_read() takes a reference on the reply packet for every
registered listener context and hands it over via triton_context_call().
The receiving ipoe_ses_recv_dhcpv4_relay() consumes that reference by
storing the packet in ses->dhcpv4_relay_reply, but the early-return
branch taken when the original request is already gone dropped the
reference without freeing the packet.

This leaks one packet every time a relay reply races with the request
being released, which happens regularly on busy relay-mode deployments.

Reported-by: Louis Scalbert (#101)

0 files changed, 0 insertions, 0 deletions