Report information
The Basics
Id:
38705
Status:
resolved
Priority:
Medium/Medium
Queue:

People
Owner:
Nobody in particular
Cc:
AdminCc:

BugTracker
Version Fixed:
4.3.3 4.1-ESV-R12
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
(no value)
Priority:
(no value)
Severity:
(no value)
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
(no value)
Area:
(no value)

Dates
Created:Tue, 24 Feb 2015 11:06:02 -0500
Updated:Fri, 07 Jul 2017 19:46:42 -0400
Closed:Mon, 13 Apr 2015 16:50:17 -0400



This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

Subject: Huge address range in config leads to crash of dhcpd
Date: Tue, 24 Feb 2015 17:05:53 +0100
To: dhcp-bugs@isc.org
From: "Jiri Popelka" <jpopelka@gmail.com>
When dhcpd is configured to serve addresses from a huge pool of addresses it crashes. Sample config: subnet 10.0.0.0 netmask 255.0.0.0 { range 10.0.0.2 10.255.255.254; } Tried with dhcp-4.1.1-P1 and dhcp-4.3.2rc1. When I decrease size of the address pool to for example range 10.0.0.2 10.100.255.254; dhcpd runs OK (or claims that it has 'No memory for address range 10.0.0.2-10.100.255.254'). It's of course not a real use-case, but it might reveal a bug somewhere. I don't have any patch, just a backtrace and valgrind output, see attachments. They are from dhcp-4.3.2rc1, no patches applied. -- Jiri Popelka Red Hat, inc.

Message body is not shown because sender requested not to inline it.

Message body is not shown because sender requested not to inline it.

Subject: Re: [ISC-Bugs #38705] AutoReply: Huge address range in config leads to crash of dhcpd
Date: Tue, 24 Feb 2015 17:09:37 +0100
To: dhcp-bugs@isc.org
From: "Jiri Popelka" <jpopelka@redhat.com>
I accidentally sent the report from my private e-mail (@gmail), please use this one (@redhat) in replies, thanks. -- Jiri
On Tue Feb 24 16:06:02 2015, jpopelka@gmail.com wrote: > When dhcpd is configured to serve addresses from a huge pool of > addresses it crashes. => I put under review a fix for this exact bug last week...
On Tue Feb 24 16:06:02 2015, jpopelka@gmail.com wrote: > When dhcpd is configured to serve addresses from a huge pool of > addresses it crashes. Sample config: > > subnet 10.0.0.0 netmask 255.0.0.0 { > range 10.0.0.2 10.255.255.254; > } > > Tried with dhcp-4.1.1-P1 and dhcp-4.3.2rc1. > > When I decrease size of the address pool to for example > range 10.0.0.2 10.100.255.254; > dhcpd runs OK (or claims that it has > 'No memory for address range 10.0.0.2-10.100.255.254'). > > It's of course not a real use-case, but it might reveal a bug somewhere. > I don't have any patch, just a backtrace and valgrind output, see > attachments. > They are from dhcp-4.3.2rc1, no patches applied. Hi Jiri, I don't have the number handy, but we were already aware of this bug and have a fix for it in-progress. Thanks, Brian Conry ISC Support
Thank you for your bug report We have added a patch for a better error message in this case, it is tagged as 38637 and should be released in the first (most likely beta) versions of 4.3.3 4.1-ESV-R12