[Dnsmasq-discuss] DHCPv6 Protocol Compliance Violations in DNSMASQ

[宋相普]

Sorry, I’ve just added the PDF report as an attachment.
This is my first time discussing through the mailing list, so I’m not very familiar with some of the procedures.





发件人：Dan Schaper <dan.schaper at pi-hole.net>
发送日期：2025-07-18 08:48:51
收件人："宋相普" <songxiangpu at mail.sdu.edu.cn>,dnsmasq-discuss at lists.thekelleys.org.uk
主题：Re: [Dnsmasq-discuss] DHCPv6 Protocol Compliance Violations in DNSMASQ
Can you provide your report in a PDF please. I'm quite surprised that a security researcher would provide proof via a zipfile of unknown provenance and unknown content. 


Dan




------ Original Message ------
From "宋相普" <songxiangpu at mail.sdu.edu.cn>
To dnsmasq-discuss at lists.thekelleys.org.uk
Date 7/16/2025 7:02:19 AM
Subject [Dnsmasq-discuss] DHCPv6 Protocol Compliance Violations in DNSMASQ



Hi,
We are writing to report the results of a recent analysis we conducted on the DHCPv6 implementation in dnsmasq. Our work focused on verifying its compliance against the most recent DHCPv6 specification, RFC 8415.
During our analysis, we identified dozens of instances where the implementation's behavior deviates from the mandatory requirements of the RFC. While many of these are minor protocol non-compliances, several have potential security implications that we believe warrant a high-priority review.
Due to the number of findings, we have compiled a comprehensive report detailing each issue, which is provided as an attachment to this email. We hope this report is helpful.
Best regards,
Xiangpu Song







-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20250718/a845b504/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dnsmasq.pdf
Type: application/pdf
Size: 865940 bytes
Desc: not available
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20250718/a845b504/attachment-0001.pdf>