From f124f26033aef7724c776cfc84895b4bbf4ba273 Mon Sep 17 00:00:00 2001
From: hanzhijian <hanzhijian@zepp.com>
Date: Wed, 12 Aug 2026 09:41:40 +0800
Subject: [PATCH] [lwip-dhcpd] Fix pbuf leak for oversized requests

---
 components/net/lwip-dhcpd/dhcp_server_raw.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/components/net/lwip-dhcpd/dhcp_server_raw.c b/components/net/lwip-dhcpd/dhcp_server_raw.c
index 47b990aea2..b271ce36b9 100644
--- a/components/net/lwip-dhcpd/dhcp_server_raw.c
+++ b/components/net/lwip-dhcpd/dhcp_server_raw.c
@@ -338,6 +338,7 @@ dhcp_server_recv(void *arg, struct udp_pcb *pcb, struct pbuf *p, const ip_addr_t
     if (q->tot_len < p->tot_len)
     {
         LWIP_DEBUGF(DHCP_DEBUG | LWIP_DBG_TRACE | LWIP_DBG_LEVEL_WARNING, ("pbuf_alloc dhcp_msg too small %d:%d\n", q->tot_len, p->tot_len));
+        pbuf_free(q);
         pbuf_free(p);
         return;
     }