esp-idf

Mirrors/esp-idf

Fork 0

mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00

Commit Graph

Author	SHA1	Message	Date
Andrii AnoshynandClaude Opus 4.7	3ae8e7e347	fix(protocomm): prevent out-of-bounds write in console line buffer The console transport read loop passed &linebuf[i] to uart_read_bytes() before checking i < LINE_BUF_SIZE, so a line of LINE_BUF_SIZE or more bytes without a terminator wrote one byte past the 256-byte linebuf stack array. Gate the read on the bounds check and reserve the final byte for the NUL terminator (LINE_BUF_SIZE - 1), so the buffer handed to esp_console_run() stays terminated even when an overlong line is truncated. Closes https://github.com/espressif/esp-idf/issues/18638 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-06-05 17:34:10 +08:00

Author

SHA1

Message

Date

Andrii AnoshynandClaude Opus 4.7

3ae8e7e347

fix(protocomm): prevent out-of-bounds write in console line buffer

The console transport read loop passed &linebuf[i] to uart_read_bytes()
before checking i < LINE_BUF_SIZE, so a line of LINE_BUF_SIZE or more
bytes without a terminator wrote one byte past the 256-byte linebuf
stack array.

Gate the read on the bounds check and reserve the final byte for the NUL
terminator (LINE_BUF_SIZE - 1), so the buffer handed to esp_console_run()
stays terminated even when an overlong line is truncated.

Closes https://github.com/espressif/esp-idf/issues/18638

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-06-05 17:34:10 +08:00