I noticed that perhaps I didn't explain the problem fully
This patch fixes alignment problems of pbuf of PBUF_POOL type.

p->len = 200 > 128 - 12 ? 128 - 12 : 200 -> 128-12 -> 116 !!!
Here the problem isn't that 116 is not aligned of course,
it is that p->payload + p->len is a buffer overflow by two bytes.
Memory corruction goes hand in hand with buffer overflows.

Cheers,
Pedro Alves


_______________________________________________
lwip-users mailing list
[email protected]
http://lists.nongnu.org/mailman/listinfo/lwip-users

Reply via email to