raptor comments

Results 45 comments of


                                            raptor

Heap buffer overflows in RT-Thread dfs_v2 dfs_file

Based on my analysis, `fullpath` comes indeed from `dfs_normalize_path()`, which in turn processes user input. I couldn't see any limits imposed on path length in `dfs_normalize_path()`, i.e.: ```c if (filename[0]...

Heap buffer overflows in RT-Thread dfs_v2 dfs_file

It looks good now. I'm glad my bug report has sparked some improvements also in other areas of the codebase! However, I'm not entirely sure about this fix that is...

Heap buffer overflows in RT-Thread dfs_v2 dfs_file

Hi, it's been one month since I reported this vulnerability, and I wanted to ask if you have any update. As standard practice, I plan to request a CVE ID...

Heap buffer overflows in RT-Thread dfs_v2 dfs_file

Hi, I just wanted to let you know that I've requested a CVE ID from MITRE for this vulnerability and for https://github.com/RT-Thread/rt-thread/issues/8271 as well. I'm planning to do the same...

Heap buffer overflows in RT-Thread dfs_v2 dfs_file

Hi there, CVE-2024-24334 was assigned to this vulnerability. I'm planning to publish my security advisory and writeup on March 5th. Thanks.

Out-of-bounds static array access in RT-Thread var_export utility

Hi, it's been one month since I reported this vulnerability, and I wanted to ask if you have any update. As standard practice, I plan to request a CVE ID...

Out-of-bounds static array access in RT-Thread var_export utility

Hi there, CVE-2024-25392 was assigned to this vulnerability. I'm planning to publish my security advisory and writeup on March 5th. Thanks.

Weak random source in RT-Thread rt_random driver

Hi, it's been one month since I reported this vulnerability, and I wanted to ask if you have any update. As standard practice, I plan to request a CVE ID...

Weak random source in RT-Thread rt_random driver

Hi there, CVE-2024-25389 was assigned to this vulnerability. I'm planning to publish my security advisory and writeup on March 5th. Thanks.

Heap buffer overflow in RT-Thread wlan driver

Hi, it's been one month since I reported this vulnerability, and I wanted to ask if you have any update. As standard practice, I plan to request a CVE ID...