lwIP - A Lightweight TCP/IP stack - Bugs: bug #59603, Use-after-free if...
You are not allowed to post comments on this tracker with your current authentication level.
bug #59603: Use-after-free if tcp_process_refused_data() returns ERR_ABRT
Submitter: | Tom Vajzovic <tcv> | ||
Submitted: | Wed 02 Dec 2020 08:37:24 PM UTC | ||
Category: | TCP | Severity: | 3 - Normal |
Item Group: | Crash Error | Status: | None |
Privacy: | Public | Assigned to: | None |
Open/Closed: | Open | Planned Release: | None |
lwIP version: | 2.1.1 |
Tue 23 Aug 2022 08:10:50 AM UTC, comment #1: |
wuchangsheng <wuchangsheng> |
Wed 02 Dec 2020 08:37:24 PM UTC, original submission:
Hi,
|
Tom Vajzovic <tcv> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Powered by Savane 3.13-d3ae.
Corresponding source code
The tcp_process_refused_data function only returns err without actually releasing the PCB, so the tcp_input function can also access the PCB