applying fix for:

     0000260: udhcpc doesn't validate client hardware address

1 files changed, 5 insertions, 0 deletions

diff --git a/networking/udhcp/dhcpc.c b/networking/udhcp/dhcpc.c
index d99711c43..7d50a72ed 100644
--- a/networking/udhcp/dhcpc.c
+++ b/networking/udhcp/dhcpc.c
@@ -443,6 +443,11 @@ int main(int argc, char *argv[])
                         if (memcmp(client_config.arp,packet.chaddr,6))
                                 continue;
 
+                        if (memcmp(packet.chaddr, client_config.arp, 6)) {
+                                DEBUG(LOG_INFO, "packet does not have our chaddr -- ignoring");
+                                continue;
+                        }
+
                         if ((message = get_option(&packet, DHCP_MESSAGE_TYPE)) == NULL) {
                                 DEBUG(LOG_ERR, "couldnt get option from packet -- ignoring");
                                 continue;