wsdd2: two remote memory-safety bugs in the packet parsers

Package Name

wsdd2

Maintainer

openwrt/packages

OpenWrt Version

master

OpenWrt Target/Subtarget

generic

Steps to Reproduce

net/wsdd2 pins Netgear b676d8ac, which has two remotely reachable
memory-safety bugs:

1. NULL-pointer write / remote DoS in wsd_parse_http_header (wsd.c) — a
   "POST " TCP segment with no CRLF to port 3702 crashes the daemon.
   Single-threaded, so one packet = full DoS.
2. Out-of-bounds read in llmnr_send_response (llmnr.c) — a crafted LLMNR
   query walks the label cursor past the packet.

Found with libFuzzer/ASan. Patches attached; they apply to b676d8ac.
Upstream is gone (Netgear and Andy2244 repos both deleted); the only
live tree is github.com/oldium/wsdd2, which has the fixes. Suggest
carrying them as patches under net/wsdd2/patches/ (0011-, 0012-).

wsdd2-01-http-null-deref.patch
wsdd2-02-llmnr-oob-read.patch

Actual Behaviour

crash

Confirmation Checklist

• The package is maintained in this repository.
• I understand that issues related to the base OpenWrt repository or LuCI repository will be closed.
• I am reporting an issue for OpenWrt, not an unsupported fork.

Start in net/wsdd2 and inspect the package's pinned wsdd2 source at b676d8ac, then review the two attached patches for wsd.c and llmnr.c. Carry them under net/wsdd2/patches/ as 0011- and 0012-, build the package, and verify that the reported malformed HTTP and LLMNR inputs no longer trigger the crashes.