bin/57476: dhcpd dumps core

[martin%NetBSD.org@localhost]

>Number:         57476
>Category:       bin
>Synopsis:       dhcpd dumps core
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jun 20 17:35:00 +0000 2023
>Originator:     Martin Husemann
>Release:        NetBSD 10.0_BETA
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD plug.duskware.de 10.0_BETA NetBSD 10.0_BETA (GENERIC64) #11: Fri Mar 31 13:02:15 CEST 2023 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/work/src-10/sys/arch/evbarm/compile/GENERIC64 evbarm
Architecture: aarch64
Machine: evbarm
>Description:

Every once in a while my dhcpd process dumps core:

Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x000000000071ec68 in lookup_hashed_option (universe=<optimized out>, 
    options=<optimized out>, code=12)
    at /work/src-10/external/mpl/dhcp/lib/common/../../dist/common/options.c:2500
2500    /work/src-10/external/mpl/dhcp/lib/common/../../dist/common/options.c: No such file or directory.
[Current thread is 1 (process 9282)]
(gdb) bt
#0  0x000000000071ec68 in lookup_hashed_option (universe=<optimized out>, 
    options=<optimized out>, code=12)
    at /work/src-10/external/mpl/dhcp/lib/common/../../dist/common/options.c:2500
#1  0x00000000006d8a24 in dhcp (packet=0xfaab9f593100)
    at /work/src-10/external/mpl/dhcp/bin/server/../../dist/server/dhcp.c:246
#2  0x0000000000724de0 in do_packet (interface=0xfaaba05a7500, 
    packet=0xfaab9a3dee20, len=290, from_port=17408, from=..., 
    hfrom=0xfaab9a3dee08)
    at /work/src-10/external/mpl/dhcp/lib/common/../../dist/common/options.c:4078
(gdb) info reg
x0             0x0                 0
x1             0xfaab9e0001d0      275614997152208
x2             0xc                 12
x3             0xc                 12
x4             0x71ec10            7466000
x5             0x0                 0
x6             0x0                 0
x7             0x0                 0
x8             0xfaab9f22f7c6      275615016220614
x9             0xfe3               4067
x10            0x75b510            7714064
x11            0x506faa0           84343456
x12            0x506fad0           84343504
x13            0xfaab9f22d278      275615016211064
x14            0x2                 2
x15            0xfaab9d25e510      275614982858000
x16            0x71ec10            7466000
x17            0xfaab9f77d800      275615021783040
x18            0x2                 2
x19            0xfaab9f593100      275615019774208
x20            0x0                 0
x21            0xfaab9a3dee08      275614934101512
x22            0x4400              17408
x23            0x122               290
x24            0x75b510            7714064
x25            0xfaab9a3ded50      275614934101328
x26            0x75b000            7712768
x27            0xfaaba05a7500      275615036634368
x28            0x1                 1
x29            0xfaab9a3dec20      275614934101024
x30            0x6d8a24            7178788
sp             0xfaab9a3dec10      0xfaab9a3dec10
pc             0x71ec68            0x71ec68 <lookup_hashed_option+88>
cpsr           0x80000000          [ EL=0 N ]
fpsr           0x0                 0
fpcr           0x0                 0
(gdb) x/16i $pc-16
   0x71ec58 <lookup_hashed_option+72>:  
    b   0x71ec7c <lookup_hashed_option+108>
   0x71ec5c <lookup_hashed_option+76>:  ldr     x1, [x1, #8]
   0x71ec60 <lookup_hashed_option+80>:  
    cbz x1, 0x71ec7c <lookup_hashed_option+108>
   0x71ec64 <lookup_hashed_option+84>:  ldr     x0, [x1]
=> 0x71ec68 <lookup_hashed_option+88>:  ldr     x3, [x0, #24]
   0x71ec6c <lookup_hashed_option+92>:  ldr     w3, [x3, #24]
   0x71ec70 <lookup_hashed_option+96>:  cmp     w3, w2
   0x71ec74 <lookup_hashed_option+100>: 
    b.ne        0x71ec5c <lookup_hashed_option+76>  // b.any
   0x71ec78 <lookup_hashed_option+104>: ret
   0x71ec7c <lookup_hashed_option+108>: 
    mov x0, #0x0                        // #0
   0x71ec80 <lookup_hashed_option+112>: ret


>How-To-Repeat:
n/a

>Fix:
n/a