abc/lwip
1
0
Fork 0
mirror of https://git.savannah.nongnu.org/git/lwip.git synced 2026-08-10 01:23:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix bug #49218: pbuf_clen() overflow as a result of tcp_write concatenation

Browse Source 
Let pbuf_clen() return u16_t
This commit is contained in:
Dirk Ziegelmeier
2016-09-30 09:04:36 +02:00
parent 682b82aad8
commit 149701b347
5 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/core/ipv4/ip4_frag.c
View File

@@ -160,7 +160,7 @@ static int
ip_reass_free_complete_datagram(struct ip_reassdata *ipr, struct ip_reassdata *prev)
{
u16_t pbufs_freed = 0;
u8_t clen;
u16_t clen;
struct pbuf *p;
struct ip_reass_helper *iprh;
@@ -487,8 +487,7 @@ ip4_reass(struct pbuf *p)
struct ip_hdr *fraghdr;
struct ip_reassdata *ipr;
struct ip_reass_helper *iprh;
u16_t offset, len;
u8_t clen;
u16_t offset, len, clen;
IPFRAG_STATS_INC(ip_frag.recv);
MIB2_STATS_INC(mib2.ipreasmreqds);