[lwip-devel] [bug #50837] LWIP TCP/IP race condition

[Simon Goldschmidt]

Follow-up Comment #10, bug #50837 (project lwip):

Joel, thanks for that excellent analysis. I wonder why the Win/Python client
doesn't re-send that ACK. Is there something wrong with our implementation of
RFC 5961 section 3.2?

Preet, the mbox holds pbufs pointers. Increasing the mbox size indeed does not
help much as you can get into this situation at any time. You would have to
set mbox size to your window's size as any byte could come in in one
segment/pbuf.

In fact, the segments dropped by lwIP could in fact have been dropped by the
network. In that case, we would have a zombie pcb without doing anything wrong
other than protecting against the RST spoofing attack!

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?50837>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/