[lwip-devel] [bug #41041] Potential use-after-free in IPv6 reassembly

[Valery Ushakov]

Follow-up Comment #4, bug #41041 (project lwip):

Both IPv6 and IPv4 fixes have a fatal typo in the third expression of the for
loop:

+verbartim+
for (ipr_prev = reassdatagrams; ipr_prev != NULL; ipr = ipr->next) {
-verbartim-

where ipr is assigned to instead of ipr_prev.

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?41041>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/