[lwip-devel] [bug #50424] Double free of http_state when post data enabled

[Josh Green]

Follow-up Comment #3, bug #50424 (project lwip):

I enabled auto window behavior and this problem went away.  I do need manual
window behavior however for software updates which need to throttle data to
FLASH.  I'm still fairly certain this is an issue with lwIP.  Here is some
pseudo logic of how this happens when manual window updates are enabled:

http_recv:
  call http_post_rxpbuf()
    call httpd_post_receive_data()
      call httpd_post_data_recved()
        if hs != NULL && hs->no_auto_wnd:
        hs->unrecved_bytes = 0
        if hs->post_content_len_left == 0 && hs->unrecved_bytes == 0:
          call http_send()
            if hs->unrecved_bytes == 0 && hs != NULL:
            if hs->left == 0 && fs_bytes_left (hs->handle) == 0:
              call http_eof()

  if hs->post_content_len_left == 0:
    call http_send()
      if hs->unrecved_bytes == 0 && hs != NULL:
      if hs->left == 0 && fs_bytes_left (hs->handle) == 0:
        call http_eof()


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?50424>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/