[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[lwip-devel] [bug #49328] Crash error in ip6_frag due to Assertion Fail
|
From: |
Dirk Ziegelmeier |
|
Subject: |
[lwip-devel] [bug #49328] Crash error in ip6_frag due to Assertion Fail |
|
Date: |
Thu, 13 Oct 2016 06:53:28 +0000 (UTC) |
|
User-agent: |
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0 |
Update of bug #49328 (project lwip):
Status: None => Fixed
Open/Closed: Open => Closed
_______________________________________________________
Follow-up Comment #1:
The returned rambuf is contiguous, so it is always of length >= IP6_HLEN +
IP6_FRAG_HLEN. The assertion meant to check the incoming pbuf, since its
payload is copied via SMEMCPY, and this only works if the incoming pbuf is
contiguous. But only IP6_HLEN is copied, so checking for "IP6_HLEN +
IP6_FRAG_HLEN" instead of only IP6_HLEN was wrong.
Thanks for reporting!
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?49328>
_______________________________________________
Message sent via/by Savannah
http://savannah.nongnu.org/