[lwip-devel] [bug #53192] use-after-free in

[Simon Goldschmidt]

URL:
  <http://savannah.nongnu.org/bugs/?53192>

                 Summary: use-after-free in 
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: goldsimon
            Submitted on: Tue 20 Feb 2018 04:32:54 PM UTC
                Category: None
                Severity: 3 - Normal
              Item Group: Crash Error
                  Status: None
                 Privacy: Public
             Assigned to: goldsimon
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: 2.1.0
            lwIP version: git head

    _______________________________________________________

Details:

When altcp_mbedtls_lower_recv() gets a NULL pbuf (closed indication) and
passes this to an upper layer, this upper layer might close the connection but
altcp_mbedtls_lower_recv() continues to use it and calls close itself.




    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?53192>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/