1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
RIOT/sys
Benjamin Valentin d4aa8aad10 nanocoap: validate input with NDEBUG
A malformed or malicious CoAP request may contain invalid field lengths.
`nanocoap` protects with this by using `assert()`, which safely crashes
the application in debug mode.

In release mode the check is removed.

Instead of allowing arbitrary memory writes, return 0 on invalid inputs.

Discovered by [Coverity](https://scan3.coverity.com/reports.htm#v46910/p10250/fileInstanceId=38357789&defectInstanceId=9793779&mergedDefectId=297306)
2020-08-11 15:54:23 +02:00
..
analog_util
app_metadata
arduino sys/arduino: include arduino_sketches in Makefile.dep 2020-06-25 11:02:02 +02:00
auto_init drivers/sdcard_spi: remove auto-init 2020-07-09 08:50:53 +02:00
base64 sys/base64: Improved implementation 2020-07-06 09:16:24 +02:00
benchmark
bitfield
bloom
can
cb_mux
checksum
clif
color
cpp11-compat
crypto
cxx_ctor_guards sys/cxx_ctor_guards: Add guard for c++ ctors 2020-07-23 20:24:47 +02:00
div
ecc
eepreg
embunit
event sys/event: Made trivial functions static inline 2020-08-05 11:45:53 +02:00
evtimer
fmt
frac
fs
fuzzing
hashes sys/hashes: inline functions in sha224/sha256 2020-06-10 10:00:30 +02:00
include Merge pull request #14695 from maribu/event_cleanup 2020-08-06 22:15:51 +02:00
iolist
irq_handler
isrpipe
libc/include/sys
log
luid
matstat
memarray
mineplex
net nanocoap: validate input with NDEBUG 2020-08-11 15:54:23 +02:00
newlib_syscalls_default sys/newlib_syscalls_default: don't use static msp430 heap size 2020-08-05 14:32:58 +02:00
od sys/od/od: fix -Werror=char-subscripts 2020-06-19 10:44:56 +02:00
oneway-malloc
phydat
pipe
pm_layered sys/pm: Correctly access pm_blocker 2020-07-15 11:21:59 +02:00
posix cpu/msp430: remove obsolete msp430 specific headers 2020-08-05 14:29:07 +02:00
progress_bar
ps sys/ps/ps: use same order as tcb for lookup table 2020-07-29 17:13:11 +02:00
puf_sram
quad_math
random Merge pull request #14488 from PeterKietzmann/pr_add_sha256prng 2020-07-29 11:20:55 +02:00
riotboot
saul_reg
schedstatistics sys/schedstatistics: handle if PIDs are KERNEL_PID_UNDEF 2020-06-25 16:02:28 +02:00
sema
seq
shell net/netif : Move 'NETIF_NAMELENMAX' to 'CONFIG_' 2020-08-03 16:09:21 +05:30
ssp
stdio_null
stdio_rtt
stdio_semihosting stdio_semihosting: Initial include of Semihosting-based STDIO 2020-06-09 10:15:49 +02:00
stdio_uart
suit
test_utils sys/test_utils/dummy_thread: initial commit 2020-06-09 13:25:14 +02:00
timex
trace sys/trace: initial commit 2020-06-10 21:21:33 +02:00
trickle
tsrb
universal_address
uri_parser
usb Merge pull request #14404 from benpicco/sys/usb_board_reset_in_bootloader 2020-07-01 13:49:59 +02:00
usb_board_reset sys/usb_board_reset: add usb_board_reset_in_bootloader definition 2020-07-01 10:30:17 +02:00
uuid
vfs vfs: provide function to get internal file information by fd 2020-07-01 13:36:25 +02:00
xtimer
zptr
ztimer sys/ztimer: fix missing include for periph_rtt submodule 2020-07-17 20:10:27 +02:00
doc.txt
Kconfig
Makefile sys: Sort Makefile 2020-08-07 16:42:39 +02:00
Makefile.dep sys/arduino: Require feature cpp 2020-07-23 20:18:34 +02:00
Makefile.include