1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
RIOT/sys/net
Benjamin Valentin d4aa8aad10 nanocoap: validate input with NDEBUG
A malformed or malicious CoAP request may contain invalid field lengths.
`nanocoap` protects with this by using `assert()`, which safely crashes
the application in debug mode.

In release mode the check is removed.

Instead of allowing arbitrary memory writes, return 0 on invalid inputs.

Discovered by [Coverity](https://scan3.coverity.com/reports.htm#v46910/p10250/fileInstanceId=38357789&defectInstanceId=9793779&mergedDefectId=297306)
2020-08-11 15:54:23 +02:00
..
application_layer nanocoap: validate input with NDEBUG 2020-08-11 15:54:23 +02:00
ble ble/skald: remove broken assert in init() 2019-09-26 22:07:23 +02:00
credman net/credman : Expose to Kconfig 2020-07-14 21:26:19 +05:30
crosslayer netopt: add NETOPT_PDU_SIZE 2020-07-29 11:57:52 +02:00
gnrc gnrc_sixlowpan_iphc: fix last byte of iphc_hdr always being 0 2020-08-11 14:09:28 +02:00
link_layer net/l2filter : Expose configurations to Kconfig 2020-07-22 00:26:09 +05:30
netdev_test sys/net: iolist updates 2018-03-06 14:00:32 +01:00
netif net/netif : Expose configurations to Kconfig 2020-08-03 16:10:00 +05:30
network_layer sys/net: fix typos 2019-11-23 22:39:38 +01:00
routing net: Remove NHDP module 2020-02-18 13:20:05 +01:00
sock sock_util: fix IPv4 address parsing 2020-06-24 18:36:42 +02:00
transport_layer sys: fix doxygen grouping 2018-06-11 19:12:02 +02:00
doc.txt doc: add net to sys group 2015-08-30 14:00:33 +02:00
Kconfig net/netif : Expose configurations to Kconfig 2020-08-03 16:10:00 +05:30