Skip to content

Require exact DHCP request and response ports#174

Open
fallintoplace wants to merge 1 commit into
openai:mainfrom
fallintoplace:fix/dhcp-port-checks
Open

Require exact DHCP request and response ports#174
fallintoplace wants to merge 1 commit into
openai:mainfrom
fallintoplace:fix/dhcp-port-checks

Conversation

@fallintoplace

Copy link
Copy Markdown

What changed

  • require DHCP requests to use the exact 68 -> 67 port pair
  • require DHCP responses to use the exact 67 -> 68 port pair
  • add unit tests for valid DHCP traffic and near-miss port combinations

Why

The UDP helper classified packets as DHCP when either side of the port pair matched. That broadened the broadcast allow path for VM DHCP requests and widened the host-side snooping match before DHCP payload decoding.

Validation

  • cargo fmt
  • cargo test --no-run udp_packet_helper
  • direct test binary run for the new tests because .cargo/config.toml forces runner = "sudo -E" on this target

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant