[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[lwip-devel] [bug #38288] lwip_shutdown followed by lwip_close can cause
|
From: |
Ed Branch |
|
Subject: |
[lwip-devel] [bug #38288] lwip_shutdown followed by lwip_close can cause double free of tcp_pcb |
|
Date: |
Fri, 08 Feb 2013 23:13:29 +0000 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 |
Follow-up Comment #1, bug #38288 (project lwip):
Correction: For the fast connection case the first tcp_shudown call has only
shut_rx set. The section should read:
With a fast connection (XGbE), i see:
tcp_shutdown with pcb->state == CLOSE_WAIT, shut_rx == 1, shut_tx == 0
tcp_shutdown with pcb->state == CLOSE_WAIT, shut_rx == 0, shut_tx == 2
memp_free(..., pcb) from tcp_input with pcb->state == CLOSED
tcp_close with pcb->state == CLOSED
memp_free(..., pcb) from tcp_close_shutdown with pcb->state == CLOSED
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?38288>
_______________________________________________
Message sent via/by Savannah
http://savannah.nongnu.org/