1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
RIOT/sys/net/application_layer
Sören Tempel f073dcdb3d gnrc_dhcpv6_client: Fix out-of-bounds access during option parsing
The _parse_reply function iterates over the DHCPv6 message options
twice but only performs sanity checks on the option length in the
first iteration. As such, both loop iterations need to be identical.
Unfortunately, there aren't without this commit as (1) they use
different maximum length values and (2) the first iteration stops
parsing as soon as it encounters a zero option while the second
doesn't. As such, it is possible for out-of-bounds read to be
performed by the second loop iteration. This commit fixes this.
2022-07-11 22:55:33 +02:00
..
asymcute asymcute: Fix deadlocks in REGACK, SUBACK and UNSUBACK handler 2022-07-01 00:55:07 +02:00
cord sys/net/app/cord: Support the addition of extra registration arguments 2021-09-02 16:40:19 +02:00
dhcpv6 gnrc_dhcpv6_client: Fix out-of-bounds access during option parsing 2022-07-11 22:55:33 +02:00
dns dns_msg: Use correct byteorder for ID 2021-09-29 13:32:12 +02:00
emcute net/emcute: Allow RETAIN flag to be set on incoming PUBLISHs 2021-06-25 18:32:53 +02:00
gcoap gcoap_fileserver: use uint8_t for szx value 2022-05-23 23:43:21 +02:00
nanocoap nanocoap_sock: fix debug output 2022-06-21 23:06:33 +02:00
sntp sys/*: realign ENABLE_DEBUG 2020-10-23 11:27:48 +02:00
sock_dns sys/net/application_layer/sock_dns: add pseudomodule auto_init_sock_dns 2022-03-09 20:05:20 +01:00
sock_dns_mock sys/net/application_layer/sock_dns_mock: add module for mocking sock_dns 2022-04-03 17:29:10 +02:00
telnet sys/net/telnet: add telnet_server_disconnect() 2022-06-08 13:01:23 +02:00
uhcp net/uhcp: convert to ztimer 2022-03-31 12:50:31 +02:00
doc.txt net/emcute : Update documentation 2020-11-19 23:11:21 +01:00
Kconfig sys/net/application_layer: add telnet server module 2022-03-01 23:07:22 +01:00
Kconfig.coap net/coap: specify timeout in milliseconds 2022-01-27 14:42:49 +01:00