jerpelea opened a new pull request, #21318:
URL: https://github.com/apache/nuttx/pull/21318
## Summary
Improve malformed input handling across ICMPv6, USB host descriptor parsing,
USB storage geometry, partition parsing, and CDC-MBIM endpoint validation.
This series adds runtime validation for several cases where the code
previously
trusted packet, descriptor, or device-reported lengths too early. The changes
make the affected paths reject inconsistent inputs before using them to walk
buffers, copy descriptors, index arrays, or perform size-based calculations.
Main changes:
Bound ICMPv6 Router Advertisement option parsing by the actual ICMPv6
message length instead of the full IPv6 payload length.
Validate USB configuration descriptor lengths while walking descriptors.
Validate USB composite interface descriptor copies against both source
and
destination buffer sizes.
Bound USB composite member array writes by validating interface/IAD
records
and the calculated member count.
Reject USB mass-storage devices that report a zero logical block size.
Reject partition geometries with zero block or sector sizes before using
them
as divisors.
Reject CDC-MBIM Bulk OUT endpoints that report a zero max packet size.
includes #20794
## Impact
RELEASE
## Testing
CI
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
