Old-Ding opened a new pull request, #19328:
URL: https://github.com/apache/nuttx/pull/19328

   ## Summary
   - bound nRF91 modem version tokens parsed from AT command responses
   - size the temporary buffers to the LTE version fields
   - require both `AT%HWVERSION` fields before copying them
   
   ## Root cause
   `nrf_modem_at_scanf()` was using unbounded `%s` conversions into 16-byte 
temporary buffers even though the LTE version fields can hold 32 bytes. The 
two-field `AT%HWVERSION` parse also copied both buffers when only one field was 
parsed, which could read an uninitialized temporary buffer.
   
   ## Testing
   - `git diff --check`
   - `git show --stat --check --format=fuller HEAD`
   
   Build not run locally because this Windows machine does not have `make`, 
`cmake`, `gcc`, `clang`, or `cc` installed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to