|
From: | Simon Goldschmidt |
Subject: | [lwip-devel] [bug #53192] use-after-free in |
Date: | Tue, 20 Feb 2018 11:32:55 -0500 (EST) |
User-agent: | Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0 |
URL: <http://savannah.nongnu.org/bugs/?53192> Summary: use-after-free in Project: lwIP - A Lightweight TCP/IP stack Submitted by: goldsimon Submitted on: Tue 20 Feb 2018 04:32:54 PM UTC Category: None Severity: 3 - Normal Item Group: Crash Error Status: None Privacy: Public Assigned to: goldsimon Open/Closed: Open Discussion Lock: Any Planned Release: 2.1.0 lwIP version: git head _______________________________________________________ Details: When altcp_mbedtls_lower_recv() gets a NULL pbuf (closed indication) and passes this to an upper layer, this upper layer might close the connection but altcp_mbedtls_lower_recv() continues to use it and calls close itself. _______________________________________________________ Reply to this item at: <http://savannah.nongnu.org/bugs/?53192> _______________________________________________ Message sent via/by Savannah http://savannah.nongnu.org/
[Prev in Thread] | Current Thread | [Next in Thread] |