From bbb5e99f2544bae1a46f37ef7971b88ed56f6a31 Mon Sep 17 00:00:00 2001 From: Dirk Ziegelmeier Date: Fri, 19 Feb 2016 23:26:06 +0100 Subject: [PATCH] Fix netconn access after it was freed in lwiperf - found by Coverity --- src/apps/lwiperf/lwiperf.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/apps/lwiperf/lwiperf.c b/src/apps/lwiperf/lwiperf.c index ec30fb4d..8ce9e2d1 100644 --- a/src/apps/lwiperf/lwiperf.c +++ b/src/apps/lwiperf/lwiperf.c @@ -518,6 +518,7 @@ lwiperf_tcp_poll(void *arg, struct tcp_pcb *tpcb) LWIP_UNUSED_ARG(tpcb); if (++conn->poll_count >= LWIPERF_TCP_MAX_IDLE_SEC) { lwiperf_tcp_close(conn, LWIPERF_TCP_ABORTED_LOCAL); + return ERR_OK; /* lwiperf_tcp_close frees conn */ } if (!conn->base.server) {