[lwip-devel] [bug #34846] LWIP segfaults from IPv6 reassembly timer

[Ivan Delamer]

Follow-up Comment #5, bug #34846 (project lwip):

Hey Sebastian, thanks for posting the bug.

I think we'll have to go with something like solution 1. I checked the patch
and I see a small issue: the ICMP message might be triggered by
ip6_reass_remove_oldest_datagram(), which is sometimes called from the receive
callback if we need to make room for a new fragmented packet.

In this case, your patch overrides the valid ip6_current_src_addr() and that
could create a problem.

I will fix this by matching the destination address in the fragmented packet
to a netif, it should match the netif on which the packet was accepted
originally. I think this approach is used in ND6 as well.

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?34846>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/