lwIP - A Lightweight TCP/IP stack - Bugs: bug #27252, Address pointer invalid after...
You are not allowed to post comments on this tracker with your current authentication level.
bug #27252: Address pointer invalid after freeing pbuf in UDP receive callback
Submitter: | Ben Hastings <hastings> | ||
Submitted: | Fri 14 Aug 2009 03:18:44 PM UTC | ||
Category: | UDP | Severity: | 3 - Normal |
Item Group: | Change Request | Status: | Fixed |
Privacy: | Public | Assigned to: | goldsimon |
Open/Closed: | Closed | Planned Release: | None |
lwIP version: | CVS Head |
Wed 07 Oct 2009 05:51:43 PM UTC, comment #5: |
Simon Goldschmidt <goldsimon> |
Sat 03 Oct 2009 06:19:28 PM UTC, comment #4: I'll fix this for 1.3.2. |
Simon Goldschmidt <goldsimon> |
Tue 15 Sep 2009 05:31:13 PM UTC, comment #3: The workaround (making a local copy of the address) isn't difficult and should only be necessary if the user code frees the incoming pbuf before sending out a response. Would it make more sense to document the behavior than to change the code? |
Ben Hastings <hastings> |
Sun 30 Aug 2009 09:06:15 PM UTC, comment #2: Uhm, seems like I missed one thing here: netbufs don't copy the address but only the pointer to the address, which collides with this change because as it is now, the address doesn't survive the thread change from tcpip_thread to the application thread where the netbuf is used.
|
Simon Goldschmidt <goldsimon> |
Sun 23 Aug 2009 11:33:18 AM UTC, comment #1: Fixed by copying the address to the stack before calling the recv callback function. |
Simon Goldschmidt <goldsimon> |
Fri 14 Aug 2009 03:18:44 PM UTC, original submission:
After the pbuf is freed in the UDP receive callback, the address pointer passed to the function may no longer be valid.
|
Ben Hastings <hastings> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 9 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2009-10-07 | goldsimon | Status | In Progress | Fixed | |
Open/Closed | Open | Closed | |||
2009-10-03 | goldsimon | Planned Release | 1.4.0 | 1.3.2 | |
2009-08-30 | goldsimon | Status | Fixed | In Progress | |
Open/Closed | Closed | Open | |||
2009-08-23 | goldsimon | Status | None | Fixed | |
Assigned to | None | goldsimon | |||
Open/Closed | Open | Closed | |||
2009-08-20 | kieranm | Planned Release | 1.4.0 |
Powered by Savane 3.13-f8d8.
Corresponding source code
Fixed by reverting to the code before and adding a warning at the recv-callback definition in struct udp_pcb.