buglwIP - A Lightweight TCP/IP stack - Bugs: bug #51535, ip frame reass reassemble has...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #51535: ip frame reass reassemble has something wrong

Submitted by:  shenwei <swloveydp>
Submitted on:  Sat 22 Jul 2017 02:20:03 AM UTC  
 
Category: IPv4Severity: 3 - Normal
Item Group: Feature RequestStatus: Fixed
Privacy: PublicAssigned to: Simon Goldschmidt <goldsimon>
Open/Closed: ClosedPlanned Release: None
lwIP version: 2.0.1

(Jump to the original submission Jump to the original submission)

Wed 02 Aug 2017 07:12:44 PM UTC, comment #7:

Fixed, thanks for reporting.

Simon Goldschmidt <goldsimon>
Project AdministratorIn charge of this item.
Fri 28 Jul 2017 04:14:56 PM UTC, comment #6:

The issue I raised here has actually not been fixed as far as I can see. I've just created a new bug #51606 for this.

Ambroz Bizjak <abizjak>
Fri 28 Jul 2017 08:24:34 AM UTC, comment #5:

Probably a duplicate of #51595 #51596 and/or #51597

Can bug-reporter check if bug is still present in git master?

Stian Sebastian Skjelstad <mywave>
Thu 27 Jul 2017 10:50:27 PM UTC, comment #4:

Perhaps the error is here:

http://git.savannah.gnu.org/cgit/lwip.git/tree/src/core/ipv4/ip4_frag.c?id=925f3944d3d9de6e730f6d0738844f339ce9e35c#n378

Where a pbuf is inserted before another one, there is no check if there is a hole between the new one and the previous one. There should be a check similar to line 425 where the new pbuf is inserted to the end. The code at line 448 then only checks there are no holes after the new pbuf.

Ambroz Bizjak <abizjak>
Wed 26 Jul 2017 08:19:59 PM UTC, comment #3:

Seriously, this is not a report we can work on. Please provide more input!

Simon Goldschmidt <goldsimon>
Project AdministratorIn charge of this item.
Mon 24 Jul 2017 06:49:22 PM UTC, comment #2:

Is it possible for the bug report author to upload a pcap dump file?

Stian Sebastian Skjelstad <mywave>
Mon 24 Jul 2017 06:29:03 PM UTC, comment #1:

Can you help me a little more to reproduce this? How do you cut a 200 byte UDP packet into 9 pieces?

Simon Goldschmidt <goldsimon>
Project AdministratorIn charge of this item.
Sat 22 Jul 2017 02:20:03 AM UTC, original submission:

I test send udp packet, one 200 byte cut into 9 frame, when i send frame as order [8, 0, 1, 2, 3, 4, 7, 6 ,5], when recv the sequence 7, ip_reass_chain_frag_into_datagram_and_validate function regard as recv a whole ip packet

shenwei <swloveydp>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by abizjak (Posted a comment)
  • -unavailable- added by mywave (Posted a comment)
  • -unavailable- added by goldsimon (Posted a comment)
  • -unavailable- added by swloveydp (Submitted the item)
  • -unavailable- added by swloveydp
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 02 Aug 2017 07:12:44 PM UTCgoldsimonStatusNeed Info=>Fixed
      Assigned toNone=>goldsimon
      Open/ClosedOpen=>Closed
    Thu 27 Jul 2017 06:37:54 PM UTCgoldsimonStatusNone=>Need Info
    Sat 22 Jul 2017 02:20:03 AM UTCswloveydpCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1