jerpelea opened a new pull request, #21313: URL: https://github.com/apache/nuttx/pull/21313
## Summary The CDC-MBIM host receive path trusted NDP offsets, NDP lengths, and DPE entries from the attached device. A malicious device could create an NDP chain that loops forever or make the DPE walk read past the received NTB. Validate the NTB header and block length, bound the number of NDPs processed per NTB, validate each current and next NDP offset, restrict DPE iteration to the advertised NDP length, and ensure datagram ranges are contained within the received NTB before passing them to the network stack. ## Impact RELEASE ## Testing CI -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
