Skip to content

Speculative fix for CodeSonar overflow issue in ssl_certman.c #8715

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 6, 2025

Conversation

padelsbach
Copy link
Contributor

@padelsbach padelsbach commented Apr 25, 2025

Description

CodeSonar thinks there is a buffer overrun in CM_MemRestoreCertCache when checking hdr->version, etc. The length is checked indirectly when comparing current > end.

This change provides a more direct check to see if CodeSonar is happy.

Buffer Overrun _ daily _ CodeSonar.pdf

Testing

Awaiting CodeSonar run.

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@padelsbach padelsbach force-pushed the ssl-certman-codesonar branch from 1c91f7e to b4d9442 Compare April 25, 2025 19:58
@dgarske
Copy link
Contributor

dgarske commented Apr 25, 2025

Retest this please: "Found unhandled hudson.remoting.RequestAbortedException exception: java.io.StreamCorruptedException: invalid stream header: 636F7272"

@padelsbach padelsbach marked this pull request as ready for review May 3, 2025 15:55
@padelsbach padelsbach assigned wolfSSL-Bot and unassigned padelsbach May 5, 2025
@dgarske dgarske merged commit 213c43b into wolfSSL:master May 6, 2025
186 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants