[En-Nut-Discussion] FYI: Bug in ICMP destination unreachable handling fixed

Ole Reinhardt ole.reinhardt at embedded-it.de
Mon Sep 28 13:56:45 CEST 2015

Hi all,

in SVN trunk r6135 I fix a bug in the handling of ICMP code 3 messages
(destination unreachable). It was caused by missing parenthesis in
pointer arithmetic.

As result, NutTcpFindSocket() (in NutIcmpUnreach()) was fed with invalid
data. In worst case this could have led to sockets beeing abborting
accidently, in most cases nothing happened at all, as no matching socket
could be found.

But even worse, this bug also could result in crashes, if the pointer
arithmetic resulted in a read out of the physical memory bounds.

It might be a good idea to update Nut/OS in your projects which rely on
a correct ICMP handling.

Best regards,


kernel concepts GmbH            Tel: +49-271-771091-14
Sieghuetter Hauptweg 48         Mob: +49-177-7420433
D-57072 Siegen

More information about the En-Nut-Discussion mailing list