-
Notifications
You must be signed in to change notification settings - Fork 207
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
APIs missing argument validation #546
Comments
dmknutsen
added a commit
to dmknutsen/cFE
that referenced
this issue
Mar 24, 2020
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Jan 29, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 2, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 16, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 16, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 16, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 18, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 18, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 24, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Feb 25, 2021
zanzaben
added a commit
to zanzaben/cFE
that referenced
this issue
Mar 2, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
The following APIs are missing argument validation:
cfe_sb_api.c:CFE_SB_SubscribeFull - Quality is not checked…consider checking that it is 0 or 1
cfe_es_api.c:CFE_ES_DeleteApp - Can get a segmentation fault if user tries to delete an APP greater than CFE_PLATFORM_ES_MAX_APPLICATIONS
cfe_tbl_api.c:CFE_TBL_GetAddresses - Can result in Segmentation fault if NumTables grows larger than max number of tables.
cfe_tbl_api.c:CFE_TBL_ReleaseAddresses - Should check to make sure NumTables is less than CFE_PLATFORM_TBL_MAX_NUM_TABLES
cfe_es_perf.c:CFE_ES_PerfLogAdd - Should check if EntryExit is either a 0 or 1
cfe_es_api.c:CFE_ES_ReloadApp - Can Result in Segmentation fault if APID is invalid
cfe_es_api.c:CFE_ES_CreateChildTask - Input Argument 'Flags' is not validated…also it does not appear to be used anywhere, consider removing
cfe_es_api.c:CFE_ES_GetAppName - Consider comparing BufferLength with OS_MAX_API_NAME prior to use.
cfe_es_api.c:CFE_ES_RegisterCDS - Consider checking if block size is less than CFE_PLATFORM_ES_MAX_BLOCK_SIZE
cfe_fs_api.c:CFE_FS_InitHeader - SubType not checked
cfe_sb_api.c:CFE_SB_ZeroCopyGetPtr - Is there a maximum message size? Consider verifying MsgSize prior to use.
cfe_sb_util.c:CFE_SB_SetUserDataLength - Consider verifying Length of user data (if there exists a limit) and/or TotalMsgSize
cfe_sb_api.c:CFE_SB_SubscribeLocal - MsgLim is not checked…if a max limit does exist, should add argument validation
Expected behavior
All input arguments are validated prior to use.
System observed on:
NA - code review/audit
Reporter Info
Dan Knutsen
NASA Goddard
The text was updated successfully, but these errors were encountered: