[lwip-devel] [bug #57790] Fragmented UDP packets leads to crash on reassembly

[Benjamin K]

Follow-up Comment #9, bug #57790 (project lwip):

I can confirm that bug. I'm using STM32F767II MCU with FreeRtos and LwIP
2.1.2. I'm not working with real hardware network interface but I've
implemented a virtual network interface without any DMA access etc.

In ip_reass_free_complete_datagram:
[...]
  /* First, free all received pbufs.  The individual pbufs need to be
released
     separately as they have not yet been chained */
  p = ipr->p;
  while (p != NULL) {
    struct pbuf *pcur;
*->*    iprh = (struct ip_reass_helper *)p->payload;

It "crashed" in the second iteration of that while-loop.

Setting IP_REASSEMBLY to 0 helps to prevent that fault, however that is not a
solution. Are there any news about how to fix that

    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?57790>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/