You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tree: 13d0f5e01d

anon-contacts-fix

config-serializer

default-scope

dev

fast-st7735-display

flood.max.advert

gh-pages

main

revert-2915-main

t-impulse-ui

ui-color-refactor

companion-v1.0.0a

companion-v1.0.0b

companion-v1.0.0c

companion-v1.10.0

companion-v1.11.0

companion-v1.12.0

companion-v1.13.0

companion-v1.14.0

companion-v1.14.1

companion-v1.15.0

companion-v1.16.0

companion-v1.2.0

companion-v1.2.1

companion-v1.2.2

companion-v1.3.0

companion-v1.4.0

companion-v1.4.1

companion-v1.4.2

companion-v1.4.3

companion-v1.5.0

companion-v1.5.1

companion-v1.6.0

companion-v1.6.1

companion-v1.6.2

companion-v1.7.0

companion-v1.7.1

companion-v1.7.2

companion-v1.7.3

companion-v1.7.4

companion-v1.8.0

companion-v1.8.1

companion-v1.9.0

rep-v6

repeater-v1.0.0a

repeater-v1.0.0c

repeater-v1.0.0d

repeater-v1.10.0

repeater-v1.11.0

repeater-v1.12.0

repeater-v1.13.0

repeater-v1.14.0

repeater-v1.14.1

repeater-v1.15.0

repeater-v1.16.0

repeater-v1.2.0

repeater-v1.2.1

repeater-v1.2.2

repeater-v1.3.0

repeater-v1.4.0

repeater-v1.4.1

repeater-v1.4.2

repeater-v1.4.3

repeater-v1.5.0

repeater-v1.5.1

repeater-v1.6.0

repeater-v1.6.1

repeater-v1.6.2

repeater-v1.7.0

repeater-v1.7.1

repeater-v1.7.2

repeater-v1.7.3

repeater-v1.7.4

repeater-v1.8.0

repeater-v1.8.1

repeater-v1.9.0

repeater-v1.9.1

room-server-v1.0.0a

room-server-v1.0.0c

room-server-v1.10.0

room-server-v1.11.0

room-server-v1.12.0

room-server-v1.13.0

room-server-v1.14.0

room-server-v1.14.1

room-server-v1.15.0

room-server-v1.16.0

room-server-v1.2.0

room-server-v1.2.1

room-server-v1.2.2

room-server-v1.3.0

room-server-v1.4.0

room-server-v1.4.1

room-server-v1.4.2

room-server-v1.4.3

room-server-v1.5.0

room-server-v1.5.1

room-server-v1.6.0

room-server-v1.6.1

room-server-v1.6.2

room-server-v1.7.0

room-server-v1.7.1

room-server-v1.7.2

room-server-v1.7.3

room-server-v1.7.4

room-server-v1.8.0

room-server-v1.8.1

room-server-v1.9.0

room-v6

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '13d0f5e01d'

${ noResults }

MeshCore/examples

History

Wessel Nieboer 13d0f5e01d fix out_frame buffer overflow in companion radio response handlers The onContactResponse handler copies peer response data into out_frame (MAX_FRAME_SIZE + 1 bytes) without checking whether the data fits. A peer response with len close to MAX_PACKET_PAYLOAD (184) writes up to 188 bytes into the 173-byte buffer, overflowing by 15 bytes. This affects the status response, telemetry response, and binary response code paths. A malicious peer can trigger the overflow by sending a large response payload, corrupting the stack. Cap each memcpy to the remaining space in out_frame before copying.		6 months ago
..
companion_radio	fix out_frame buffer overflow in companion radio response handlers	1 week ago
kiss_modem	Rename bootComplete() to onBootComplete() for naming consistency	2 months ago
simple_repeater	uitask: screen and radio poweroff moved to board	2 weeks ago
simple_room_server	Merge remote-tracking branch 'upstream/dev' into rak-ethernet	2 weeks ago
simple_secure_chat	Merge branch 'dev' into solar-watchdog	4 weeks ago
simple_sensor	Merge branch 'dev' into solar-watchdog	4 weeks ago