nuttx

mirror of https://github.com/apache/nuttx.git synced 2026-08-18 01:49:24 +08:00

Files

T

Catalin Visinescu 269cc0dc15 drivers/can/ctucanfd_pci: Stack Overflow When Malformed CAN Data Is Received

A malformed packet can trigger memory corruption in the kernel leading to a
system crash or potentially arbitrary code execution in the kernel.

The CAN driver for the CTU CAN FD IP Core connected to the NuttX device
via a PCI / PCI Express (PCIe) bus shows a lack of consideration for
malformed data, assuming the CAN frames are always correct.

Ensure `frame->fmt.rwcnt` is 21 or less before it is used in the `for` loop.

A similar change was done in ctucanfd_sock_recv().

Tested locally, builds fine.

Signed-off-by: Catalin Visinescu <catalin_visinescu@yahoo.com>

2026-06-17 17:12:22 +08:00

can_common.c

…

can_sender.c

…

can.c

drivers/can: Fix close drain, write-only reader lifecycle, and STM32 RX header

2026-04-28 10:32:56 -03:00

CMakeLists.txt

…

ctucanfd_pci.c

drivers/can/ctucanfd_pci: Stack Overflow When Malformed CAN Data Is Received