So, we have a reproducer. In my case the trick is in
default-lease-time infinite;
max-lease-time infinite;
and then
1) let some client get a lease
2) restart the server
and now the first client's request will send the server down.
So it's probably not a security problem after all.
However upstream is asking for some more info.
I already answered what I know and will re-send the questions directly to John
because I don't think we need to use this ticket as an intermediary.
So, we have a reproducer. In my case the trick is in
default-lease-time infinite;
max-lease-time infinite;
and then
1) let some client get a lease
2) restart the server
and now the first client's request will send the server down.
So it's probably not a security problem after all.
However upstream is asking for some more info.
I already answered what I know and will re-send the questions directly to John
because I don't think we need to use this ticket as an intermediary.