Bugzilla – Attachment #40664: the actual patch for bug #94547
default:
if ( p[1] )
{
if (p + 2 + p[1] >= end)
goto swend; /* corrupt packet */
if ( DhcpOptions.len[*p] == p[1] )
memcpy(DhcpOptions.val[*p],p+2,p[1]);
else