buglwIP - A Lightweight TCP/IP stack - Bugs: bug #51535, ip frame reass reassemble has...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #51535: ip frame reass reassemble has something wrong

Submitter:  shenwei <swloveydp>
Submitted:  Sat 22 Jul 2017 02:20:03 AM UTC
   
 
Category:  IPv4 Severity:  3 - Normal
Item Group:  Feature Request Status:  Fixed
Privacy:  Public Assigned to:  goldsimon
Open/Closed:  Closed Planned Release:  None
lwIP version:  2.0.1

Jump to the original submission

Wed 02 Aug 2017 07:12:44 PM UTC, comment #7: 

Fixed, thanks for reporting.

Simon Goldschmidt <goldsimon>
Group administrator
Fri 28 Jul 2017 04:14:56 PM UTC, comment #6: 

The issue I raised here has actually not been fixed as far as I can see. I've just created a new bug #51606 for this.

Ambroz Bizjak <abizjak>
Fri 28 Jul 2017 08:24:34 AM UTC, comment #5: 

Probably a duplicate of #51595 #51596 and/or #51597

Can bug-reporter check if bug is still present in git master?

Stian Sebastian Skjelstad <mywave>
Thu 27 Jul 2017 10:50:27 PM UTC, comment #4: 

Perhaps the error is here:

http://git.savannah.gnu.org/cgit/lwip.git/tree/src/core/ipv4/ip4_frag.c?id=925f3944d3d9de6e730f6d0738844f339ce9e35c#n378

Where a pbuf is inserted before another one, there is no check if there is a hole between the new one and the previous one. There should be a check similar to line 425 where the new pbuf is inserted to the end. The code at line 448 then only checks there are no holes after the new pbuf.

Ambroz Bizjak <abizjak>
Wed 26 Jul 2017 08:19:59 PM UTC, comment #3: 

Seriously, this is not a report we can work on. Please provide more input!

Simon Goldschmidt <goldsimon>
Group administrator
Mon 24 Jul 2017 06:49:22 PM UTC, comment #2: 

Is it possible for the bug report author to upload a pcap dump file?

Stian Sebastian Skjelstad <mywave>
Mon 24 Jul 2017 06:29:03 PM UTC, comment #1: 

Can you help me a little more to reproduce this? How do you cut a 200 byte UDP packet into 9 pieces?

Simon Goldschmidt <goldsimon>
Group administrator
Sat 22 Jul 2017 02:20:03 AM UTC, original submission:  

I test send udp packet, one 200 byte cut into 9 frame, when i send frame as order [8, 0, 1, 2, 3, 4, 7, 6 ,5], when recv the sequence 7, ip_reass_chain_frag_into_datagram_and_validate function regard as recv a whole ip packet

shenwei <swloveydp>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by abizjak (Posted a comment)
  • -email is unavailable- added by mywave (Posted a comment)
  • -email is unavailable- added by goldsimon (Posted a comment)
  • -email is unavailable- added by swloveydp (Submitted the item)
  • -email is unavailable- added by swloveydp
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-08-02 goldsimon StatusNeed Info Fixed
        Assigned toNone goldsimon
        Open/ClosedOpen Closed
    2017-07-27 goldsimon StatusNone Need Info
    2017-07-22 swloveydp Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code