From 1c6202c4147d1a27d47418b9f49eae5999d95f83 Mon Sep 17 00:00:00 2001 From: Simon Goldschmidt Date: Sat, 30 Jan 2021 22:06:46 +0100 Subject: [PATCH] pbuf: fix allocating large PBUF_RAM See bug #59974 --- src/core/pbuf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/pbuf.c b/src/core/pbuf.c index a209e0ca..da2934fe 100644 --- a/src/core/pbuf.c +++ b/src/core/pbuf.c @@ -271,7 +271,7 @@ pbuf_alloc(pbuf_layer layer, u16_t length, pbuf_type type) break; } case PBUF_RAM: { - u16_t payload_len = (u16_t)(LWIP_MEM_ALIGN_SIZE(offset) + LWIP_MEM_ALIGN_SIZE(length)); + mem_size_t payload_len = (mem_size_t)(LWIP_MEM_ALIGN_SIZE(offset) + LWIP_MEM_ALIGN_SIZE(length)); mem_size_t alloc_len = (mem_size_t)(LWIP_MEM_ALIGN_SIZE(SIZEOF_STRUCT_PBUF) + payload_len); /* bug #50040: Check for integer overflow when calculating alloc_len */