esp-idf

mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00

Files

Konstantin Kondrashov fb650ab64a fix(esp_event): fix format string vulnerability in esp_event_dump (SEC-064)

fprintf(file, buf) is a format-string sink: if any registered event base
or handler name contains "%", fprintf interprets it as a format directive,
causing an information leak or crash.

Replace with fprintf(file, "%s", buf) so the buffer is always treated as
plain text regardless of its content.

Closes SEC_064

2026-07-21 17:16:06 +03:00

host_test

test: format all test scripts

2025-03-05 12:08:48 +08:00

include

change(esp-event): Update the doxygen comment of esp_event_handler_register

2025-06-13 08:22:12 +02:00

private_include

fix(esp_event): Fix minor no-ISR post regression

2025-02-03 12:26:35 +01:00

test_apps

ci(core): fixed esp_event not running properly in CI