[lwip-devel] [bug #20903] TCP callbacks called with invalid conn after close

[Marc Boucher]

URL:
  <http://savannah.nongnu.org/bugs/?20903>

                 Summary: TCP callbacks called with invalid conn after close
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: marcbou
            Submitted on: Saturday 08/25/2007 at 18:11
                Category: TCP
                Severity: 4 - Important
              Item Group: Crash Error
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: 1.3.0

    _______________________________________________________

Details:


TCP callbacks in api_msg.c can under certain circumstances be called with an
invalid conn pointer after the connection has been closed (and conn has been
freed).

Proposed solution is to reset the callbacks and arg (conn) to NULL in
do_close_internal().

Patch enclosed.






    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Saturday 08/25/2007 at 18:11  Name: do_close_internal.patch  Size: 791B
  By: marcbou

<http://savannah.nongnu.org/bugs/download.php?file_id=13800>

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?20903>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/