1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
RIOT/sys/net/application_layer
Benjamin Valentin d4aa8aad10 nanocoap: validate input with NDEBUG
A malformed or malicious CoAP request may contain invalid field lengths.
`nanocoap` protects with this by using `assert()`, which safely crashes
the application in debug mode.

In release mode the check is removed.

Instead of allowing arbitrary memory writes, return 0 on invalid inputs.

Discovered by [Coverity](https://scan3.coverity.com/reports.htm#v46910/p10250/fileInstanceId=38357789&defectInstanceId=9793779&mergedDefectId=297306)
2020-08-11 15:54:23 +02:00
..
asymcute net/asymcute : Expose to Kconfig 2020-07-07 16:27:57 +05:30
cord net/cord/lc: Replace usage of deprecated gcoap_finish 2020-07-17 10:01:55 +02:00
dhcpv6 net/dhcpv6 : Expose to Kconfig 2020-07-24 00:23:08 +05:30
dns sock_dns: use the same buffer for request & reply 2020-02-24 14:29:17 +01:00
emcute Merge pull request #11957 from miri64/emcute/fix/payload-copy-error 2019-10-07 17:17:44 +02:00
gcoap net/gcoap: Remove gcoap_finish 2020-07-17 16:33:19 +02:00
nanocoap nanocoap: validate input with NDEBUG 2020-08-11 15:54:23 +02:00
sntp sntp: fix for new xtimer API and some bugs 2017-03-06 13:38:25 +01:00
uhcp sys/net/uhcp: remove unused returned value in uhcp_client 2019-10-28 15:14:40 +01:00
Kconfig net/dhcpv6 : Expose to Kconfig 2020-07-24 00:23:08 +05:30
Kconfig.coap net/coap: Expose configurations to Kconfig 2020-04-24 10:06:45 +02:00