[lwip-devel] [bug #21699] segment leak in ooseq processing when last data packet was lost

[Simon Goldschmidt]

Follow-up Comment #1, bug #21699 (project lwip):

It seems that not only the ooseq processing has a problem (in fact, that is
not really a problem).

In the scenario below, tcp_pcb_remove is called before freeing the pcb ('if
(recv_flags & TF_CLOSED)' in tcp_input), which should free all the lists.
However, tcp_pcb_purge (called from tcp_pcb_remove) does nothing in the CLOSED
state (as well as in the TIME_WAIT state). Changing this check solves this
bug.

Therefore, I would rather solve the bug that way instead of checking the
ooseq for flags (like FIN) that are received twice (the code would be more
complex there). But maybe that is not the cleanest thing to do?

Any lwIP TCP experts have to say something about this? Kieran?

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?21699>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.nongnu.org/