[lwip-devel] [bug #64847] Error in sendtrap v2c

[Andrew]

URL:
  <https://savannah.nongnu.org/bugs/?64847>

                 Summary: Error in sendtrap v2c
                   Group: lwIP - A Lightweight TCP/IP stack
               Submitter: andi
               Submitted: Fri 03 Nov 2023 08:11:53 AM UTC
                Category: None
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None
            lwIP version: 2.2.0


    _______________________________________________________

Follow-up Comments:


-------------------------------------------------------
Date: Fri 03 Nov 2023 08:11:53 AM UTC By: Andrew <andi>
There are bug in snmp_traps.c
Line 394-395

Now:
  if (trap_msg->snmp_version == SNMP_VERSION_2c) {
      struct snmp_obj_id snmp_trap_oid =  { 0 };  /* used for...
Need:
  struct snmp_obj_id snmp_trap_oid =  { 0 };  /* used for ...
  if (trap_msg->snmp_version == SNMP_VERSION_2c) {

An OID is created, a pointer is written to it in varbind[1].value.
The memory will be cleared when we leave the curly braces, and the
snmp_varbind_len structure will be located in the same place. When calculating
the length of varbind[1].value is corrupted.
(In         snmp_trap_varbind_sum
and snmp_asn1_enc_length_cnt)








    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?64847>

_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/