<html><head><style id="css_styles" type="text/css"><!--blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style='text-align: center;'], li[style='text-align: center; '], li[style='text-align: right;'], li[style='text-align: right; '] { list-style-position: inside;}
body { font-family: 'Segoe UI'; font-size: 12pt; }
.quote { margin-left: 1em; margin-right: 1em; border-left: 5px #ebebeb solid; padding-left: 0.3em; }
a.em-mention[href] { text-decoration: none; color: inherit; border-radius: 3px; padding-left: 2px; padding-right: 2px; background-color: #e2e2e2; }
._em_placeholder {color: gray; border-bottom: 1px dotted lightblue;} ._em_placeholder:before{color:gray; content: '{{ ';} ._em_placeholder:after{color:gray; content: ' }}';}
--></style></head><body style="background-color: white; color: black;"><div style="">Can you provide your report in a PDF please. I'm quite surprised that a security researcher would provide proof via a zipfile of unknown <span data-huuid="1558877493727793106" style="">provenance </span>and unknown content. </div><div style=""><br /></div><div style="">Dan</div>
<div style=""><br style="" /></div>
<div x-em-replyforwardheader="" style=""><br style="" /></div>
<div style="">
<div style="">------ Original Message ------</div>
<div style="">From "宋相普" <<a href="mailto:songxiangpu@mail.sdu.edu.cn" style="">songxiangpu@mail.sdu.edu.cn</a>></div>
<div style="">To <a href="mailto:dnsmasq-discuss@lists.thekelleys.org.uk" style="">dnsmasq-discuss@lists.thekelleys.org.uk</a></div>
<div style="">Date 7/16/2025 7:02:19 AM</div>
<div style="">Subject [Dnsmasq-discuss] DHCPv6 Protocol Compliance Violations in DNSMASQ</div></div><div x-em-quote="" style=""><br style="" /></div>
<div id="x7ead9c4f77f6447" style=""><blockquote cite="AJcASgDZJJTvn*C7RLjqoaoa.1.1752674539513.Hmail.202137094@mail.sdu.edu.cn" type="cite" class="cite2" style="">
<div style="line-height: 1.7; color: rgb(0, 0, 0); font-size: 14px; font-family: Arial;"><p style=""><span style="color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Hi,</span></p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">We are writing to report the results of a recent analysis we conducted on the DHCPv6 implementation in <code style="font-size: 14px; line-height: 20px; font-family: "Google Sans Mono", monospace; color: rgb(87, 91, 95); background-color: rgb(233, 238, 246); border-radius: 6px; padding: 1px 6px;">dnsmasq</code>. Our work focused on verifying its compliance against the most recent DHCPv6 specification, RFC 8415.</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">During our analysis, we identified dozens of instances where the implementation's behavior deviates from the mandatory requirements of the RFC. While many of these are minor protocol non-compliances, several have potential security implications that we believe warrant a high-priority review.</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Due to the number of findings, we have compiled a comprehensive report detailing each issue, which is provided as an attachment to this email. We hope this report is helpful.</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Best regards,</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Xiangpu Song</p></div><br style="" /></blockquote></div>
</body></html>