[lwip-devel] [bug #34526] nd6_queue_packet() frees too much if out-of-memory

[Simon Goldschmidt]

URL:
  <http://savannah.nongnu.org/bugs/?34526>

                 Summary: nd6_queue_packet() frees too much if out-of-memory
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: goldsimon
            Submitted on: Di 11 Okt 2011 10:55:32 GMT
                Category: IPv6
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: 
            lwIP version: CVS Head

    _______________________________________________________

Details:

This is from reading the code only, I don't have the time to check it right
now but don't want to forget it:

In nd6_queue_packet() lines 1550 and 1573, nd6_free_q() is called (which frees
all queues until ->next is NULL) without setting q->next to NULL. Although,
q->next is rememberd.

I think this is wrong as I think the code wants to free one queue entry only,
although it would free all queue entries (for that neighbor_index) as it is
now.




    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?34526>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.nongnu.org/