search

rtlabs-com / c-open

CANopen stack for embedded devices
http://www.rt-labs.com
Other
79 stars 40 forks source link

rt-kernel coal abstraction assumes DLC field is less or equal to 8 #58

Closed elupus closed 1 year ago

elupus commented 1 year ago

Current rt-kernel coal drivers allow DLC up to 15 on received can frames. However only 8 bytes of data is available in the data buffers. This could lead to out of bounds read.

https://github.com/rtlabs-com/c-open/blob/7a94f54fdb3462df488b466616b28d9af028c19e/src/ports/rt-kernel/coal_can.c#L101