search

contiki-ng / tinydtls

A version of tinyDTLS that is refactored to be more easy to use "standalone" (e.g. without bindings to a specific IP-stack).
Other
8 stars 25 forks source link

Raw input crashing server #9

Open pfg666 opened 5 years ago

pfg666 commented 5 years ago

In testing TinyDTLS, we found that the server (launched by running ./tests/dtls-server) can be crashed by applying certain malformed inputs. We traced this to bugs in the code. Does it present a security risk to post the inputs here, so people can fix the bugs?

We can also fix the bugs ourselves, the concern is that we are not network specialists, so we might break TinyDTLS inadvertently. Thanks!

joakimeriksson commented 5 years ago

You are welcome to both report issues via issues here (but preferably on Contiki-NG repo - as that is where we mostly look) and of course do PR:s - we can do the work of ensure the quality if you do a PR but are unsure about some specific things.