If tcp_seq_num is wrap around, tcp_seq_num >= initial_data_seq_num isn't satisfied and store_block() isn't called. The condition has a wrap around issue, so it is fixed in this patch.
Signed-off-by: Yasuharu Shibata yasuharu.shibata@gmail.com Reviewed-by: Michael Trimarchi michael@amarulasolutions.com Suggested-by: Michael Trimarchi michael@amarulasolutions.com Reported-by: Tim Harvey tharvey@gateworks.com Tested-by: Fabio Estevam festevam@denx.de --- v1 -> v2: - Add tags in commit message - Link to v1: https://lore.kernel.org/u-boot/20240415130013.26721-1-yasuharu.shibata@gmail... --- net/wget.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/net/wget.c b/net/wget.c index 71bac92d84..abab371e58 100644 --- a/net/wget.c +++ b/net/wget.c @@ -404,9 +404,7 @@ static void wget_handler(uchar *pkt, u16 dport, } next_data_seq_num = tcp_seq_num + len;
- if (tcp_seq_num >= initial_data_seq_num && - store_block(pkt, tcp_seq_num - initial_data_seq_num, - len) != 0) { + if (store_block(pkt, tcp_seq_num - initial_data_seq_num, len) != 0) { wget_fail("wget: store error\n", tcp_seq_num, tcp_ack_num, action); net_set_state(NETLOOP_FAIL);