[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[lwip-devel] [bug #34526] nd6_queue_packet() frees too much if out-of-me
From: |
Simon Goldschmidt |
Subject: |
[lwip-devel] [bug #34526] nd6_queue_packet() frees too much if out-of-memory |
Date: |
Tue, 11 Oct 2011 10:55:33 +0000 |
User-agent: |
Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1 |
URL:
<http://savannah.nongnu.org/bugs/?34526>
Summary: nd6_queue_packet() frees too much if out-of-memory
Project: lwIP - A Lightweight TCP/IP stack
Submitted by: goldsimon
Submitted on: Di 11 Okt 2011 10:55:32 GMT
Category: IPv6
Severity: 3 - Normal
Item Group: None
Status: None
Privacy: Public
Assigned to: None
Open/Closed: Open
Discussion Lock: Any
Planned Release:
lwIP version: CVS Head
_______________________________________________________
Details:
This is from reading the code only, I don't have the time to check it right
now but don't want to forget it:
In nd6_queue_packet() lines 1550 and 1573, nd6_free_q() is called (which frees
all queues until ->next is NULL) without setting q->next to NULL. Although,
q->next is rememberd.
I think this is wrong as I think the code wants to free one queue entry only,
although it would free all queue entries (for that neighbor_index) as it is
now.
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?34526>
_______________________________________________
Nachricht geschickt von/durch Savannah
http://savannah.nongnu.org/
- [lwip-devel] [bug #34526] nd6_queue_packet() frees too much if out-of-memory,
Simon Goldschmidt <=