lwIP - A Lightweight TCP/IP stack - Bugs: bug #43437, Memory corruption beyound memory...
You are not allowed to post comments on this tracker with your current authentication level.
bug #43437: Memory corruption beyound memory pool
Submitter: | Piotr <michcior> | ||
Submitted: | Sat 18 Oct 2014 07:12:23 PM UTC | ||
Category: | pbufs | Severity: | 3 - Normal |
Item Group: | Crash Error | Status: | Invalid |
Privacy: | Public | Assigned to: | None |
Open/Closed: | Closed | Planned Release: | None |
lwIP version: | 1.4.1 |
Mon 20 Oct 2014 05:36:05 AM UTC, comment #4: |
Simon Goldschmidt <goldsimon> |
Sun 19 Oct 2014 04:10:56 PM UTC, comment #3: The default allocation is:
|
Ivan Delamer <idelamer> |
Sat 18 Oct 2014 09:09:55 PM UTC, comment #2: I saw it "in action" :)
|
Piotr <michcior> |
Sat 18 Oct 2014 08:52:12 PM UTC, comment #1: Have you seen that 'ram' is only a pointer to 'ram_heap'? Have you checked the size of 'ram_heap'? Have you actually seen memory corruption or is this only from reading the code??? |
Simon Goldschmidt <goldsimon> |
Sat 18 Oct 2014 07:12:23 PM UTC, original submission:
In the mem_init (mem.c) The code assigns to "ram_end" the top of the pool. Then, if the pool was declared without spare bytes, the following instructions corrupt memory, which is located just after memory pool.
|
Piotr <michcior> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 3 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2014-10-20 | goldsimon | Status | Works For Me | Invalid | |
Open/Closed | Open | Closed | |||
2014-10-18 | goldsimon | Status | None | Works For Me |
Powered by Savane 3.13-758e.
Corresponding source code
That's why I wondered if this was from reading the code.
So it is your fault. Please do read the instructions around the lines where LWIP_RAM_HEAP_POINTER is checked in mem.c on how to calculate the heap size.