From fa84ee6e4e2815d087f46db5dac08479ecfd8307 Mon Sep 17 00:00:00 2001
From: David Cermak <cermak@espressif.com>
Date: Wed, 27 May 2026 15:06:07 +0200
Subject: [PATCH] fix(mdns): reject packets shorter than the DNS header

Packets with 11 bytes passed the old length check but caused a read
past the RX buffer when loading the additional RR count field.
---
 components/mdns/mdns_receive.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/components/mdns/mdns_receive.c b/components/mdns/mdns_receive.c
index 793fd586f..ad4d600fc 100644
--- a/components/mdns/mdns_receive.c
+++ b/components/mdns/mdns_receive.c
@@ -637,7 +637,7 @@ static void mdns_parse_packet(mdns_rx_packet_t *packet)
 #endif // CONFIG_MDNS_SKIP_SUPPRESSING_OWN_QUERIES
 
     // Check for the minimum size of mdns packet
-    if (len <=  MDNS_HEAD_ADDITIONAL_OFFSET) {
+    if (len < MDNS_HEAD_LEN) {
         return;
     }