[lwip-devel] [bug #61525] altcp_tls: null dereference when unable to alloc pcb in tcp_listen_input

[Josh]

URL:
  <https://savannah.nongnu.org/bugs/?61525>

                 Summary: altcp_tls: null dereference when unable to alloc pcb
in tcp_listen_input
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: inojosh
            Submitted on: Mon 22 Nov 2021 09:12:25 PM UTC
                Category: apps
                Severity: 3 - Normal
              Item Group: Crash Error
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None
            lwIP version: 2.1.3

    _______________________________________________________

Details:

In tcp_listen_input, when a new PCB can't be created:

TCP_EVENT_ACCEPT(pcb, NULL, pcb->callback_arg, ERR_MEM, err);

leads to altcp_tcp_accept with new_tpcb as NULL.
There are no checks for this, and the NULL dereference eventually occurs in
altcp_tcp_setup_callbacks. 




    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/bugs/?61525>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/