From 91333c5d2f910a6f7a123105709f3a2e0f32d00d Mon Sep 17 00:00:00 2001
From: Simon Goldschmidt <goldsimon@gmx.de>
Date: Fri, 10 Jan 2014 21:21:54 +0100
Subject: [PATCH] fixed bug #39898 tcp_fasttmr() possible lock due to infinte
 queue process loop

---
 CHANGELOG      | 3 +++
 src/core/tcp.c | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/CHANGELOG b/CHANGELOG
index 4e2fcf35..3a8675bb 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -80,6 +80,9 @@ HISTORY
 
  ++ Bugfixes:
 
+  2014-01-10: Simon Goldschmidt
+  * tcp.c: fixed bug #39898 tcp_fasttmr() possible lock due to infinte queue process loop
+
   2013-06-29: Simon Goldschmidt
   * inet.h, sockets.h: partially fixed bug #37585: IPv6 compatibility (in socket structs)
 
diff --git a/src/core/tcp.c b/src/core/tcp.c
index 8690cd24..65fc3c19 100644
--- a/src/core/tcp.c
+++ b/src/core/tcp.c
@@ -1112,6 +1112,8 @@ tcp_fasttmr_start:
         }
       }
       pcb = next;
+    } else {
+      pcb = pcb->next;
     }
   }
 }