Uploaded image for project: 'LWIP based TCP/IP'
  1. LWIP based TCP/IP
  2. PSLWIP-537

Use after free when deallocating TCP socket after use

          Details

          • Type: Bug
          • Status: Closed
          • Priority: Major
          • Resolution: Fixed
          • Affects Version/s: V5.3.1.0, V5.4.0.0
          • Fix Version/s: V5.4.0.1, V5.4.1.0
          • Labels:
            None
          • Account:
            SPC TCP_IP (SPCTCPIP)

            Description

            When an application uses LwIP_Socket_Alloc and LwIP_Socket_Free to manage TCP sockets memory and the application calls LwIP_Socket_Free() on a TCP socket closed beforehand, a use after free occurs when lwIP stack access the socket memory on TIME_WAIT expiration. The firmware will have undefined behavior afterwards.

              Attachments

                Issue Links

                relates to

                Bug - A problem which impairs or prevents the functions of the product. PSLWIP-538 Packet Socket API not functional

                • Major - Major loss of function.
                • Closed

                New Feature - A new feature of the product, which has yet to be developed. PSLWIP-492 Add API to enable/disable SNMP at runtime

                • Minor - Minor loss of function, or other problem where easy workaround is present.
                • Closed
                mentioned in

                Page Loading...

                  Expenses

                    Activity

                      Status Description

                        People

                        • Reporter:
                          Alexander.Ivanov Alexander Ivanov
                        • Votes:
                          0 Vote for this issue
                          Watchers:
                          0 Start watching this issue

                          Dates

                          • Created:
                            Updated:
                            Resolved: