buglwIP - A Lightweight TCP/IP stack - Bugs: bug #50418, LWIP_EVENT_API: fix invalid...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #50418: LWIP_EVENT_API: fix invalid calbacks for SYN_RCVD pcb

Submitter:  Simon Goldschmidt <goldsimon>
Submitted:  Tue 28 Feb 2017 11:12:14 AM UTC
   
 
Category:  TCP Severity:  3 - Normal
Item Group:  Faulty Behaviour Status:  Fixed
Privacy:  Public Assigned to:  goldsimon
Open/Closed:  Closed Planned Release:  None
lwIP version:  git head

Tue 28 Feb 2017 11:13:57 AM UTC, comment #1: 
Simon Goldschmidt <goldsimon>
Group administrator
Tue 28 Feb 2017 11:12:14 AM UTC, original submission:  

See bug #50276, comment #2:
When a pcb is in SYN_RCVD, poll and err events can be executed for this pcb. However, the application has not seen this pcb yet (just created by listen input).
For LWIP_CALLBACK_API, all callbacks except 'accept' are still NULL.
However, the callback_arg is != NULL and typically set to the listener. Now if the listener has been closed already, the callback_arg points to deallocated memory.

Since this is not a problem for LWIP_CALLBACK_API, the fix prevents calling poll and err events for pcbs in SYN_RCVD.

Simon Goldschmidt <goldsimon>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by goldsimon (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-02-28 goldsimon StatusIn Progress Fixed
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-caa5.
    Corresponding source code