buglwIP - A Lightweight TCP/IP stack - Bugs: bug #45559, Window scaling casts u32_t to...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45559: Window scaling casts u32_t to u16_t without checks

Submitted by:  Simon Goldschmidt <goldsimon>
Submitted on:  Thu 16 Jul 2015 08:43:24 AM UTC  
 
Category: TCPSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Simon Goldschmidt <goldsimon>
Open/Closed: ClosedPlanned Release: None
lwIP version: git head

Fri 28 Aug 2015 07:24:13 AM UTC, comment #2:

Fixed by limiting the window to 0xFFFF for SYN and for non-scaled connections (shouldn't change anything when window scaling is disabled).

Simon Goldschmidt <goldsimon>
Project AdministratorIn charge of this item.
Fri 28 Aug 2015 07:21:25 AM UTC, comment #1:

Updated summary to better reflect the problem.

Simon Goldschmidt <goldsimon>
Project AdministratorIn charge of this item.
Thu 16 Jul 2015 08:43:24 AM UTC, original submission:

'wnd' in the syn segment is truncated to 16 bits (so it can be 0 when TCP_WND is e.g. 0x10000).

It should be either limited to 0xFFFF or set to some default value (as after the SYN, when window scaling is enabled or not, the real window is transmitted).

Simon Goldschmidt <goldsimon>
Project AdministratorIn charge of this item.

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by goldsimon (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Fri 28 Aug 2015 07:24:13 AM UTCgoldsimonStatusIn Progress=>Fixed
      Assigned toNone=>goldsimon
      Open/ClosedOpen=>Closed
    Fri 28 Aug 2015 07:21:25 AM UTCgoldsimonStatusConfirmed=>In Progress
      SummaryWindow scaling has a problem=>Window scaling casts u32_t to u16_t without checks

    Back to the top


    Powered by Savane 3.1-cleanup1