lwIP - A Lightweight TCP/IP stack - Bugs: bug #45559, Window scaling casts u32_t to...
You are not allowed to post comments on this tracker with your current authentication level.
bug #45559: Window scaling casts u32_t to u16_t without checks
Submitter: | Simon Goldschmidt <goldsimon> | ||
Submitted: | Thu 16 Jul 2015 08:43:24 AM UTC | ||
Category: | TCP | Severity: | 3 - Normal |
Item Group: | None | Status: | Fixed |
Privacy: | Public | Assigned to: | goldsimon |
Open/Closed: | Closed | Planned Release: | None |
lwIP version: | git head |
Fri 28 Aug 2015 07:24:13 AM UTC, comment #2: |
Simon Goldschmidt <goldsimon> |
Fri 28 Aug 2015 07:21:25 AM UTC, comment #1: Updated summary to better reflect the problem. |
Simon Goldschmidt <goldsimon> |
Thu 16 Jul 2015 08:43:24 AM UTC, original submission:
'wnd' in the syn segment is truncated to 16 bits (so it can be 0 when TCP_WND is e.g. 0x10000).
|
Simon Goldschmidt <goldsimon> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 5 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2015-08-28 | goldsimon | Status | In Progress | Fixed | |
Assigned to | None | goldsimon | |||
Open/Closed | Open | Closed | |||
2015-08-28 | goldsimon | Status | Confirmed | In Progress | |
Summary | Window scaling has a problem | Window scaling casts u32_t to u16_t without checks |
Powered by Savane 3.13-3230.
Corresponding source code
Fixed by limiting the window to 0xFFFF for SYN and for non-scaled connections (shouldn't change anything when window scaling is disabled).