[lwip-devel] [bug #36369] pbuf_copy() with zero length pbuf

[Simon Goldschmidt]

Update of bug #36369 (project lwip):

                  Status:               Confirmed => Fixed                  
             Assigned to:                    None => goldsimon              
             Open/Closed:                    Open => Closed                 

    _______________________________________________________

Follow-up Comment #3:

This has already been fixed in 1.4.1: pbuf_copy does not crash but returns an
error since a pbuf with zero length at the end of a pbuf queue (forming one
packet) means to the stack that this is effectively a multi-packet pbuf queue:
a pbuf queue for one packet is assumed to be ended when p->len == p->tot_len,
not when p->next == NULL!

I'm adding a unit test for that.

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?36369>

_______________________________________________
  Nachricht gesendet von/durch Savannah
  http://savannah.nongnu.org/