lwIP - A Lightweight TCP/IP stack - Bugs: bug #46128, Possible to trigger LWIP_ASSERT by...
You are not allowed to post comments on this tracker with your current authentication level.
bug #46128: Possible to trigger LWIP_ASSERT by received SNMP messages
Submitter: | Kerem Hadimli <keremhadimli> | ||
Submitted: | Mon 05 Oct 2015 09:31:19 AM UTC | ||
Category: | Security-related | Severity: | 3 - Normal |
Item Group: | None | Status: | Fixed |
Privacy: | Public | Assigned to: | goldsimon |
Open/Closed: | Closed | Planned Release: | None |
lwIP version: | 1.4.1 |
Tue 06 Oct 2015 01:00:32 PM UTC, comment #3: |
Kerem Hadimli <keremhadimli> |
Tue 06 Oct 2015 12:43:23 PM UTC, comment #2: I just checked the changes in 0737cfb8 , it fixes 2 of the 3 ASSERT cases, but not the 1st one (inside snmp_pdu_dec_varbindlist(): LWIP_ASSERT("invalid length", len <= 0xff) ).
|
Kerem Hadimli <keremhadimli> |
Tue 06 Oct 2015 10:42:45 AM UTC, comment #1: Fied, thanks for the patch. |
Simon Goldschmidt <goldsimon> |
Mon 05 Oct 2015 09:31:19 AM UTC, original submission:
I noticed the following behavior on 1.4.1, but also I see that the code is same in git master.
|
Kerem Hadimli <keremhadimli> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 4 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2015-10-06 | goldsimon | Status | None | Fixed | |
Assigned to | None | goldsimon | |||
Open/Closed | Open | Closed | |||
2015-10-05 | keremhadimli | Attached File | - | Added msg_in.patch, #35073 |
Powered by Savane 3.13-3230.
Corresponding source code
Ah, my bad, that 3rd ASSERT inside snmp_pdu_dec_varbindlist() was already removed in master -- I was checking on 1.4.1
thanks!