1
0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2025-12-21 20:43:50 +01:00
Benjamin Valentin d4aa8aad10 nanocoap: validate input with NDEBUG
A malformed or malicious CoAP request may contain invalid field lengths.
`nanocoap` protects with this by using `assert()`, which safely crashes
the application in debug mode.

In release mode the check is removed.

Instead of allowing arbitrary memory writes, return 0 on invalid inputs.

Discovered by [Coverity](https://scan3.coverity.com/reports.htm#v46910/p10250/fileInstanceId=38357789&defectInstanceId=9793779&mergedDefectId=297306)
2020-08-11 15:54:23 +02:00
..
2019-11-23 22:39:07 +01:00
2020-02-07 13:35:25 +01:00
2019-11-23 22:39:40 +01:00
2019-11-23 22:39:37 +01:00
2020-02-20 13:24:14 +01:00
2019-11-23 22:39:37 +01:00
2020-04-07 17:48:39 +02:00
2019-11-23 22:39:38 +01:00
2019-09-09 20:27:16 +02:00
2020-03-09 17:56:34 +01:00
2020-08-11 15:54:23 +02:00
2020-06-19 10:44:56 +02:00
2020-06-10 21:21:33 +02:00
2020-02-11 13:59:59 +01:00
2020-08-07 16:42:39 +02:00
2020-07-23 20:18:34 +02:00