lwIP - A Lightweight TCP/IP stack - Bugs: bug #61525, altcp_tls: null dereference when...
You are not allowed to post comments on this tracker with your current authentication level.
bug #61525: altcp_tls: null dereference when unable to alloc pcb in tcp_listen_input
Submitter: | Josh <inojosh> | ||
Submitted: | Mon 22 Nov 2021 09:12:25 PM UTC | ||
Category: | apps | Severity: | 3 - Normal |
Item Group: | Crash Error | Status: | None |
Privacy: | Public | Assigned to: | None |
Open/Closed: | Open | Planned Release: | None |
lwIP version: | 2.1.3 |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Carbon-Copy List
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
No changes have been made to this item
Powered by Savane 3.13-caa5.
Corresponding source code
In tcp_listen_input, when a new PCB can't be created:
TCP_EVENT_ACCEPT(pcb, NULL, pcb->callback_arg, ERR_MEM, err);
leads to altcp_tcp_accept with new_tpcb as NULL.
There are no checks for this, and the NULL dereference eventually occurs in altcp_tcp_setup_callbacks.