1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2025-01-18 12:52:44 +01:00
RIOT/sys/net
Marian Buschsieweke 7a738d0e0b
sys/net/nanocoap: fix buffer overflow in separate response handling
When RFC 8974 support (module `nanocoap_token_ext`) is in use, the
request token may be longer than the buffer in the separate response
context is large. This adds a check to not overflow the buffer.

Sadly, this is an API change: Preparing the separate response context
can actually fail, so we need to report this with a return value.

The example application has been adapted to only proceed if the separate
reply context could have been prepared, and rather directly emit a
reset message if the token exceeds the static buffer.

Co-authored-by: benpicco <benpicco@googlemail.com>
2024-12-12 14:28:28 +01:00
..
application_layer sys/net/nanocoap: fix buffer overflow in separate response handling 2024-12-12 14:28:28 +01:00
ble bluetil: Ensure advertisement length does not exceed pkt len 2024-10-01 14:49:09 +02:00
credman *Kconfig*: Modify Kconfig to remove dep model 2024-03-27 10:28:12 +01:00
crosslayer *Kconfig*: Remove dep-only Kconfig files 2024-03-26 14:54:22 +01:00
dsm sys/net/dsm: add missing dependencies 2022-02-21 15:15:02 +01:00
gnrc gnrc_netif: use different error messages for can't queue packet 2024-11-22 19:50:20 +01:00
link_layer *Kconfig*: Modify Kconfig to remove dep model 2024-03-27 10:28:12 +01:00
lora *Kconfig*: Modify Kconfig to remove dep model 2024-03-27 10:28:12 +01:00
netdev_test netdev_test: avoid explicit cast to netdev 2021-07-09 11:35:19 +02:00
netif *Kconfig*: Modify Kconfig to remove dep model 2024-03-27 10:28:12 +01:00
netstats sys/include/net/netstats: move xtimer header where it is needed 2021-02-16 18:18:21 +01:00
netutils net/util: make use of dns_query() 2022-07-29 17:48:26 +02:00
network_layer *Kconfig*: Remove dep-only Kconfig files 2024-03-26 14:54:22 +01:00
sock *Kconfig*: Modify Kconfig to remove dep model 2024-03-27 10:28:12 +01:00
transport_layer sys: fix doxygen grouping 2018-06-11 19:12:02 +02:00
doc.txt
ieee802154.txt doc: Link to thread primer 2024-02-14 17:44:13 +01:00
Kconfig *Kconfig*: Modify Kconfig to remove dep model 2024-03-27 10:28:12 +01:00