1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2025-01-18 12:52:44 +01:00
RIOT/sys/net/application_layer
Sören Tempel 06d572c2fc asymcute: fix one byte out-of-bounds access in _len_get
As per Section 5.2.1 of the MQTT-SN specification, the MQTT-SN length
header is either 1- or 3-octet long. If it is 3-octet long then the
first octet is 0x01. The asymcute implementation currently only checks
that the incoming packet is at least 2-octet long before attempting to
parse it (MIN_PKT_LEN). However, if the first octet is 0x01 the packet
must be more than 3 octet long in order to be valid. Since asymcute
does not check this it reads one octet beyond the packet data for a
2-octet packet where the first octet has the value 0x01. This commit
fixes this issue by adding an additional sanity check to _len_get.
2022-08-10 05:41:10 +02:00
..
asymcute asymcute: fix one byte out-of-bounds access in _len_get 2022-08-10 05:41:10 +02:00
cord sys/net/app/cord: Support the addition of extra registration arguments 2021-09-02 16:40:19 +02:00
dhcpv6 gnrc_dhcpv6_client: Fix out-of-bounds access during option parsing 2022-07-11 22:55:33 +02:00
dns dns_cache: synchronize access with mutex 2022-07-20 06:30:14 +02:00
emcute net/emcute: Allow RETAIN flag to be set on incoming PUBLISHs 2021-06-25 18:32:53 +02:00
gcoap Merge pull request #18429 from miri64/gcoap/fix/empty-ack 2022-08-10 23:05:53 +02:00
nanocoap nanocoap: make coap_request_ctx_t members internal 2022-07-17 14:32:16 +02:00
sntp sys/*: realign ENABLE_DEBUG 2020-10-23 11:27:48 +02:00
sock_dns sock_dns_cache: move to dns_cache 2022-07-18 15:27:58 +02:00
sock_dns_mock sys/net/application_layer/sock_dns_mock: add module for mocking sock_dns 2022-04-03 17:29:10 +02:00
sock_dodtls sock_dodtls: provide getters for sock and session 2022-07-27 00:46:43 +02:00
telnet sys/net/telnet: add telnet_server_disconnect() 2022-06-08 13:01:23 +02:00
uhcp net/uhcp: convert to ztimer 2022-03-31 12:50:31 +02:00
doc.txt net/emcute : Update documentation 2020-11-19 23:11:21 +01:00
Kconfig sock_dodtls: Initial import of a DNS over DTLS client 2022-07-26 19:37:12 +02:00
Kconfig.coap net/coap: specify timeout in milliseconds 2022-01-27 14:42:49 +01:00