[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[lwip-devel] [bug #22692] TCP: Header length not checked to be > 20
|
From: |
Frédéric Bernon |
|
Subject: |
[lwip-devel] [bug #22692] TCP: Header length not checked to be > 20 |
|
Date: |
Sat, 22 Mar 2008 15:58:47 +0000 |
|
User-agent: |
Mozilla/5.0 (Windows; U; Windows NT 6.0; fr; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12 |
Follow-up Comment #1, bug #22692 (project lwip):
I'm not sure, but the check line ~112-113 does this :
/* remove header from payload */
if (pbuf_header(p, -((s16_t)(IPH_HL(iphdr) * 4))) || (p->tot_len <
sizeof(struct tcp_hdr))) {
the second part (evaluate after the pbuf_header) isn't enought ?
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?22692>
_______________________________________________
Message posté via/par Savannah
http://savannah.nongnu.org/