Skip to content

Commit

Permalink
Code review suggestions
Browse files Browse the repository at this point in the history
Signed-off-by: Gaurav Aggarwal <aggarg@amazon.com>
  • Loading branch information
aggarg committed Jun 12, 2024
1 parent 4a12e31 commit 0753e9b
Showing 1 changed file with 11 additions and 3 deletions.
14 changes: 11 additions & 3 deletions History.txt
Original file line number Diff line number Diff line change
@@ -1,9 +1,17 @@
Documentation and download available at https://www.FreeRTOS.org/

Changes between FreeRTOS-plus-TCP V4.1.1 and V4.1.0 released June 12, 2024
+ FreeRTOS DNS Response Handling: It was possible for a carefully crafted DNS response with domain name length value greater than the actual domain name length, to cause a buffer over-read within the DNS Response Parser. This issue affects applications using DNS functionality of the FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality are not affected, even when the DNS functionality is enabled.
This issue has been fixed by modifying the code to ensure that the DNS Response Parser never attempts to read beyond the DNS response buffer boundary.
We would like to thank Paschal Amusuo, James C. Davis, and Aravind Machiry of Purdue University, for reporting this issue.
+ FreeRTOS DNS Response Handling: It was possible for a carefully crafted
DNS response with domain name length value greater than the actual domain
name length, to cause a buffer over-read within the DNS Response Parser.
This issue affects applications using DNS functionality of the
FreeRTOS-Plus-TCP stack. Applications that do not use DNS functionality
are not affected, even when the DNS functionality is enabled.
This issue has been fixed by modifying the code to ensure that the DNS
Response Parser never attempts to read beyond the DNS response buffer
boundary.
We would like to thank Paschal Amusuo, James C. Davis, and Aravind Machiry
of Purdue University, for reporting this issue.

Changes between FreeRTOS-plus-TCP V4.1.0 and V4.0.0 released March 8, 2024
+ Add new Network Interface for Corstone-300 FVP (MPS3_AN552).
Expand Down

0 comments on commit 0753e9b

Please sign in to comment.