[Winpcap-bugs] potential bug in WinPCap can cause system hang

Sebastian Gottschalk seppig_relay at gmx.de
Wed May 7 23:55:08 GMT 2008


Hello there.

The issue is within dump.c!PacketDumpCompletion. As an I/O completion 
routine it is bound to the contract that every pending IRP passed to this 
routine has to be marked as pending in case that is wasn't yet. Since the 
device returning this IRP is a filesystem device (PacketDumpCompletion is 
setup by WriteDumpFile), such cases might happen and would then hang the 
filesystem, soon hanging up then entire system.

Solution:

if (Irp->PendingReturned)
	IoMarkIrpPending(Irp);


Greetings,
Sebastian Gottschalk


More information about the Winpcap-bugs mailing list