Skip to content

Npcap 1.86 and 1.87 hang on handle close when BPF filter has been rejected #842

@dmiller-nmap

Description

@dmiller-nmap

If a BPF filter such as "ip6 protochain 60" is compiled and then set with pcap_setfilter(), the Npcap driver will reject it (in this case due to a backwards jump). When it does so, it fails to decrement a reference count on the handle so that when the handle is closed with pcap_close(), the call hangs forever waiting for some nonexistent operation to finish. The bug was introduced in the fix for #819.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions