[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[lwip-devel] [bug #49328] Crash error in ip6_frag due to Assertion Fail

From: Arpit Agarwal
Subject: [lwip-devel] [bug #49328] Crash error in ip6_frag due to Assertion Fail
Date: Thu, 13 Oct 2016 04:39:42 +0000 (UTC)
User-agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36


                 Summary: Crash error in ip6_frag due to Assertion Fail
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: arpit_iitg
            Submitted on: Thu 13 Oct 2016 04:39:39 AM GMT
                Category: IPv6
                Severity: 3 - Normal
              Item Group: Crash Error
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None
            lwIP version: git head



There is a crash error observed in ip6_frag API due to following Assert fail:

rambuf = pbuf_alloc(PBUF_LINK, IP6_HLEN + IP6_FRAG_HLEN, PBUF_RAM);
    if (rambuf == NULL) {
      return ERR_MEM;
    LWIP_ASSERT("this needs a pbuf in one piece!",
                (p->len >= (IP6_HLEN + IP6_FRAG_HLEN)));

The scenario occurs when I try to use raw_sendto to send a ping6 packet.

I think the check in assertion is wrong. We should check rambuf->len and not
p->len as in the raw_sendto scenario p->len will be just IP6 Header len.

I locally tried modifying the assert check, and that works properly.


Reply to this item at:


  Message sent via/by Savannah

reply via email to

[Prev in Thread] Current Thread [Next in Thread]