net: consider option-length when parsing NIS domain

When parsing option 40 (network information service domain) the
option length is in variable 'oplen' and not in 'size'.

Addresses-Coverity-ID: 492765 Uninitialized variables (UNINIT)
Fixes: 8ab388bfdbcf ("net: add support to parse the NIS domain for the dhcp options")
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>

diff --git a/net/bootp.c b/net/bootp.c
index c15472f5d37f33d5506086dfda0f3c8d94ee6fdd..86c56803c76eb146f42b42ad0da915d1ace51e11 100644 (file)
--- a/net/bootp.c
+++ b/net/bootp.c
@@ -886,7 +886,7 @@ static void dhcp_process_options(uchar *popt, uchar *end)
                case 40:        /* NIS Domain name */
                        if (net_nis_domain[0] == 0) {
                                size = truncate_sz("NIS Domain Name",
-                                       sizeof(net_nis_domain), size);
+                                       sizeof(net_nis_domain), oplen);
                                memcpy(&net_nis_domain, popt + 2, size);
                                net_nis_domain[size] = 0;
                        }