mirror of
https://github.com/esphome/esphome.git
synced 2026-09-13 08:17:34 +00:00
J. Nick Koston
3246662a09
tcp_listen_with_backlog() converts the full tcp_pcb to a smaller tcp_pcb_listen struct that lacks the errf field. Calling tcp_err() on a listen PCB writes past the struct boundary, causing memory corruption and crashes (confirmed on RP2040). LWIP itself asserts pcb->state != LISTEN in tcp_err().
