[lwip-devel] [bug #66210] TFTP server sends data from control port

[Michiel van Leeuwen]

URL:
  <https://savannah.nongnu.org/bugs/?66210>

                 Summary: TFTP server sends data from control port
                   Group: lwIP - A Lightweight TCP/IP stack
               Submitter: michielvl
               Submitted: Fri 13 Sep 2024 06:27:05 AM UTC
                Category: apps
                Severity: 3 - Normal
              Item Group: Faulty Behaviour
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None
            lwIP version: 2.2.0


    _______________________________________________________

Follow-up Comments:


-------------------------------------------------------
Date: Fri 13 Sep 2024 06:27:05 AM UTC By: Michiel van Leeuwen <michielvl>
The TFTP server sends data back from port 69, the control port. But it should
pick a random port to send replies from. Quote from
https://datatracker.ietf.org/doc/html/rfc783.html:

A requesting host chooses its source
TID as described above, and sends its initial request to the  known  TID
69  decimal  (105  octal)  on  the  serving  host.   The response to the
request, under normal operation, uses a TID chosen by the server as  its
source  TID and the TID chosen for the previous message by the requestor
as its destination TID.  The two chosen TID's  are  then  used  for  the
remainder  of  the  transfer.









    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?66210>

_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/

signature.asc
Description: PGP signature