lwIP - A Lightweight TCP/IP stack - Bugs: bug #49328, Crash error in ip6_frag due to...
You are not allowed to post comments on this tracker with your current authentication level.
bug #49328: Crash error in ip6_frag due to Assertion Fail
Submitter: | Arpit Agarwal <arpit_iitg> | ||
Submitted: | Thu 13 Oct 2016 04:39:39 AM UTC | ||
Category: | IPv6 | Severity: | 3 - Normal |
Item Group: | Crash Error | Status: | Fixed |
Privacy: | Public | Assigned to: | None |
Open/Closed: | Closed | Planned Release: | None |
lwIP version: | git head |
Thu 13 Oct 2016 06:27:45 PM UTC, comment #3: |
Dirk Ziegelmeier <dziegel> |
Thu 13 Oct 2016 01:30:27 PM UTC, comment #2: Hi Dirk,
|
Arpit Agarwal <arpit_iitg> |
Thu 13 Oct 2016 06:53:28 AM UTC, comment #1: The returned rambuf is contiguous, so it is always of length >= IP6_HLEN + IP6_FRAG_HLEN. The assertion meant to check the incoming pbuf, since its payload is copied via SMEMCPY, and this only works if the incoming pbuf is contiguous. But only IP6_HLEN is copied, so checking for "IP6_HLEN + IP6_FRAG_HLEN" instead of only IP6_HLEN was wrong.
|
Dirk Ziegelmeier <dziegel> |
Thu 13 Oct 2016 04:39:39 AM UTC, original submission:
There is a crash error observed in ip6_frag API due to following Assert fail:
|
Arpit Agarwal <arpit_iitg> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 3 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2016-10-13 | dziegel | Status | None | Fixed | |
Open/Closed | Open | Closed | |||
2016-10-13 | arpit_iitg | Carbon-Copy | - | Added -email is unavailable- |
Powered by Savane 3.13-02a9.
Corresponding source code
Yes, its actually duplicated code. But I guess it is OK to have this assert right before accessing the date that needs to be contiguous. Maybe this function is called from elsewhere in the future, or the assert in the calling function is removed by for reason.