lwip-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[lwip-devel] [patch #9892] SNMP fix allowing negative offset for snmp_pb


From: Harrold
Subject: [lwip-devel] [patch #9892] SNMP fix allowing negative offset for snmp_pbuf_stream_seek()
Date: Fri, 21 Feb 2020 03:55:46 -0500 (EST)
User-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.106 Safari/537.36

URL:
  <https://savannah.nongnu.org/patch/?9892>

                 Summary: SNMP fix allowing negative offset for
snmp_pbuf_stream_seek()
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: harrold68
            Submitted on: Fri 21 Feb 2020 08:55:44 AM UTC
                Category: apps
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None

    _______________________________________________________

Details:

Function snmp_pbuf_stream_seek() does not allow parsing a negative offset, but
as far as I see, this is valid as long as (pbuf_stream->offset + offset) is
not less than 0.

Function snmp_pbuf_stream_seek() will be called indirectly by
snmp_pbuf_stream_seek_abs(), which may pass a negative relative offset.

I don't think this is currently causing any issue, but I started using this
function also for an SNMP manager implementation and found out it fails.



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Fri 21 Feb 2020 08:55:44 AM UTC  Name: fix_snmp_pbuf_stream_seek.patch 
Size: 950B   By: harrold68

<http://savannah.nongnu.org/patch/download.php?file_id=48458>

    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/patch/?9892>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]