Bugs report

[panhao410]

There are two bugs,one is in the args.c:111

     case 'p': // parse pending time
	    {
		time_t *t;

		if(parse_long(optarg, (void **)&t) != 4)
		    usage("error: invalid pending time.", 1);

		pool->pending_time = *t;
		free(t);
		break;
	    }

When you add ASAN during compilation, runtime errors will occur, mainly because free is used to free the memory space allocated for calling calloc, malloc, or realloc, rather than time_ t type（I’m not sure）

ASAN

gdb debug information

Another bug is in the options.c:387

void
append_option (dhcp_option_list *list, dhcp_option *opt)
{
    dhcp_option *nopt = calloc(1, sizeof(*nopt));
    memcpy(nopt, opt, 2 + opt->len);
    
    TAILQ_INSERT_TAIL(list, nopt, pointers);
}

When opt ->len is not properly initialized or has incorrect values, it can cause stack overflow issues in memcpy

ASAN

gdb debug information