Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

lwip:memory out-of-bounds write #520

Open
luminais opened this issue Jun 29, 2020 · 5 comments
Open

lwip:memory out-of-bounds write #520

luminais opened this issue Jun 29, 2020 · 5 comments

Comments

@luminais
Copy link

luminais commented Jun 29, 2020

if the parameter'size' of function coap_new_string is not smaller than MEMP_LEN_COAPSTRING, it will leading to memory out-of-bounds write

@luminais
Copy link
Author

image
same with COAP_OPTLIST

@mrdeep1
Copy link
Collaborator

mrdeep1 commented Jun 29, 2020

Thank you for reporting this. A fix for this has been created in #521 .

@obgm
Copy link
Owner

obgm commented Jun 30, 2020

Thank you.

@luminais For reporting issues it would be great to have a descriptive and short title, and for the error description, there is an input box the in form that opens when creating a new issue. Having the entire description in the title is a bit difficult to read.

@luminais luminais changed the title with lwip, if the parameter'size' of function coap_new_string is not smaller than MEMP_LEN_COAPSTRING, it will leading to memory out-of-bounds write lwip:memory out-of-bounds write Jul 1, 2020
@mrdeep1
Copy link
Collaborator

mrdeep1 commented Jul 23, 2022

#521 has been merged, and libcoap LwIP support has been re-written in PR #884, and so this should no longer be an issue. LwIP specific memory allocations are no longer used.

@mrdeep1
Copy link
Collaborator

mrdeep1 commented Oct 10, 2022

Fixed in #939.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants