<div style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div><span style="color: rgb(13, 13, 13); font-family: ui-sans-serif, -apple-system, system-ui, "Segoe UI", Helvetica, "Apple Color Emoji", Arial, sans-serif, "Segoe UI Emoji", "Segoe UI Symbol";">Sorry, I’ve just added the PDF report as an attachment.</span><br data-start="77" data-end="80" style="border: 0px solid rgba(13, 13, 13, 0.05); box-sizing: border-box; margin: 0px; padding: 0px; color: rgb(13, 13, 13); font-family: ui-sans-serif, -apple-system, system-ui, "Segoe UI", Helvetica, "Apple Color Emoji", Arial, sans-serif, "Segoe UI Emoji", "Segoe UI Symbol";"><span style="color: rgb(13, 13, 13); font-family: ui-sans-serif, -apple-system, system-ui, "Segoe UI", Helvetica, "Apple Color Emoji", Arial, sans-serif, "Segoe UI Emoji", "Segoe UI Symbol";">This is my first time discussing through the mailing list, so I’m not very familiar with some of the procedures.</span></div><br><br><br><div style="position:relative;zoom:1"></div><br>发件人：Dan Schaper <dan.schaper@pi-hole.net><br>发送日期：2025-07-18 08:48:51<br>收件人："宋相普" <songxiangpu@mail.sdu.edu.cn>,dnsmasq-discuss@lists.thekelleys.org.uk<br>主题：Re: [Dnsmasq-discuss] DHCPv6 Protocol Compliance Violations in DNSMASQ<br><blockquote id="isReplyContent" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><style id="css_styles" type="text/css"><!--blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style='text-align: center;'], li[style='text-align: center; '], li[style='text-align: right;'], li[style='text-align: right; '] { list-style-position: inside;}
body { font-family: 'Segoe UI'; font-size: 12pt; }
.quote { margin-left: 1em; margin-right: 1em; border-left: 5px #ebebeb solid; padding-left: 0.3em; }
a.em-mention[href] { text-decoration: none; color: inherit; border-radius: 3px; padding-left: 2px; padding-right: 2px; background-color: #e2e2e2; }
._em_placeholder {color: gray; border-bottom: 1px dotted lightblue;} ._em_placeholder:before{color:gray; content: '{{ ';} ._em_placeholder:after{color:gray; content: ' }}';}
--></style><div style="">Can you provide your report in a PDF please. I'm quite surprised that a security researcher would provide proof via a zipfile of unknown <span data-huuid="1558877493727793106" style="">provenance </span>and unknown content. </div><div style=""><br></div><div style="">Dan</div>
<div style=""><br style=""></div>
<div x-em-replyforwardheader="" style=""><br style=""></div>
<div style="">
<div style="">------ Original Message ------</div>
<div style="">From "宋相普" <<a href="mailto:songxiangpu@mail.sdu.edu.cn" style="">songxiangpu@mail.sdu.edu.cn</a>></div>
<div style="">To <a href="mailto:dnsmasq-discuss@lists.thekelleys.org.uk" style="">dnsmasq-discuss@lists.thekelleys.org.uk</a></div>
<div style="">Date 7/16/2025 7:02:19 AM</div>
<div style="">Subject [Dnsmasq-discuss] DHCPv6 Protocol Compliance Violations in DNSMASQ</div></div><div x-em-quote="" style=""><br style=""></div>
<div id="x7ead9c4f77f6447" style=""><blockquote cite="AJcASgDZJJTvn*C7RLjqoaoa.1.1752674539513.Hmail.202137094@mail.sdu.edu.cn" type="cite" class="cite2" style="">
<div style="line-height: 1.7; color: rgb(0, 0, 0); font-size: 14px; font-family: Arial;"><p style=""><span style="color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Hi,</span></p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">We are writing to report the results of a recent analysis we conducted on the DHCPv6 implementation in <code style="font-size: 14px; line-height: 20px; font-family: "Google Sans Mono", monospace; color: rgb(87, 91, 95); background-color: rgb(233, 238, 246); border-radius: 6px; padding: 1px 6px;">dnsmasq</code>. Our work focused on verifying its compliance against the most recent DHCPv6 specification, RFC 8415.</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">During our analysis, we identified dozens of instances where the implementation's behavior deviates from the mandatory requirements of the RFC. While many of these are minor protocol non-compliances, several have potential security implications that we believe warrant a high-priority review.</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Due to the number of findings, we have compiled a comprehensive report detailing each issue, which is provided as an attachment to this email. We hope this report is helpful.</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Best regards,</p><p style="margin: 0px 0px 16px; word-break: break-word; color: rgb(27, 28, 29); font-family: "Google Sans Flex", "Google Sans", "Helvetica Neue", sans-serif; font-size: 16px; font-variant-ligatures: none;">Xiangpu Song</p></div><br style=""></blockquote></div>
</blockquote></div><br>