[lwip-devel] [bug #57526] Fix the dns entries pcb_idx range

[Konstantin]

URL:
  <https://savannah.nongnu.org/bugs/?57526>

                 Summary: Fix the dns entries pcb_idx range
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: tomcat_84
            Submitted on: Fri 03 Jan 2020 11:44:52 AM UTC
                Category: DNS
                Severity: 3 - Normal
              Item Group: Faulty Behaviour
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None
            lwIP version: 2.1.1

    _______________________________________________________

Details:

in dns_send(), when 

#if ((LWIP_DNS_SECURE & LWIP_DNS_SECURE_RAND_SRC_PORT) != 0)

condition is met, pcb_idx is taken from the dns_table entry.

This pcb_idx probably can be equal to DNS_TABLE_SIZE, being set so elsewhere.
It is not tested inside dns_send(). It can cause table reading out of range.




    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?57526>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/