mirror/lwip
1
0
Fork 0
mirror of https://github.com/lwip-tcpip/lwip.git synced 2024-11-18 20:10:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixed bug ##24596: Vulnerability on faulty TCP options length in tcp_parseopt

Browse Source
This commit is contained in:
goldsimon 2008-10-18 15:24:06 +00:00
parent 13a139eef7
commit 299e2a7077
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGELOG
View File

@ -51,6 +51,10 @@ HISTORY
++ Bugfixes: ++ Bugfixes:
2008-10-18 Simon Goldschmidt
* tcp_in.c: fixed bug ##24596: Vulnerability on faulty TCP options length
in tcp_parseopt
2008-10-15 Simon Goldschmidt 2008-10-15 Simon Goldschmidt
* ip_frag.c: fixed bug #24517: IP reassembly crashes on unaligned IP headers * ip_frag.c: fixed bug #24517: IP reassembly crashes on unaligned IP headers
by packing the struct ip_reass_helper. by packing the struct ip_reass_helper.

2
src/core/tcp_in.c
View File

@ -1308,7 +1308,7 @@ tcp_receive(struct tcp_pcb *pcb)
static void static void
tcp_parseopt(struct tcp_pcb *pcb) tcp_parseopt(struct tcp_pcb *pcb)
{ {
u8_t c; u16_t c;
u8_t *opts, opt; u8_t *opts, opt;
u16_t mss; u16_t mss;