buglwIP - A Lightweight TCP/IP stack - Bugs: bug #45559, Window scaling casts u32_t to...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45559: Window scaling casts u32_t to u16_t without checks

Submitter:  Simon Goldschmidt <goldsimon>
Submitted:  Thu 16 Jul 2015 08:43:24 AM UTC
   
 
Category:  TCP Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  goldsimon
Open/Closed:  Closed Planned Release:  None
lwIP version:  git head

Fri 28 Aug 2015 07:24:13 AM UTC, comment #2: 

Fixed by limiting the window to 0xFFFF for SYN and for non-scaled connections (shouldn't change anything when window scaling is disabled).

Simon Goldschmidt <goldsimon>
Group administrator
Fri 28 Aug 2015 07:21:25 AM UTC, comment #1: 

Updated summary to better reflect the problem.

Simon Goldschmidt <goldsimon>
Group administrator
Thu 16 Jul 2015 08:43:24 AM UTC, original submission:  

'wnd' in the syn segment is truncated to 16 bits (so it can be 0 when TCP_WND is e.g. 0x10000).

It should be either limited to 0xFFFF or set to some default value (as after the SYN, when window scaling is enabled or not, the real window is transmitted).

Simon Goldschmidt <goldsimon>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by goldsimon (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2015-08-28 goldsimon StatusIn Progress Fixed
        Assigned toNone goldsimon
        Open/ClosedOpen Closed
    2015-08-28 goldsimon StatusConfirmed In Progress
        SummaryWindow scaling has a problem Window scaling casts u32_t to u16_t without checks

    Back to the top

    Powered by Savane 3.13-3230.
    Corresponding source code