tencentcloud-iot-sdk-embedded-c

tencentcloud-iot-sdk-embedded-c copied to clipboard

qcloud-iot-sdk-embedded-c$ ./cmake_build.sh Build all (SDK libs and samples) -- The C compiler identification is GNU 11.2.0 -- Detecting C compiler ABI info -- Detecting C compiler ABI info - done...

zllfdd

samples/mqtt/multi_thread_mqtt_sample.c, multi_client_shadow_sample.c, ota_mqtt_sample.c存在内存DF和UAF问题。

2

samples/mqtt/multi_thread_mqtt_sample.c,ota_mqtt_sample.c存在内存UAF (memory Use-After-Free) 安全问题（即使用了一个已经释放的内存）。 multi_client_shadow_sample.c, ota_mqtt_sample.c存在DF（memory Double Free）安全问题（即对内存进行双重释放）。 1. samples/mqtt/multi_thread_mqtt_sample.c https://github.com/tencentyun/qcloud-iot-sdk-embedded-c/blob/master/samples/mqtt/multi_thread_mqtt_sample.c UAF问题：在第201行已经释放了action_value内存，然而在202行又调用了action_value内存，此时释放后的action_value内存值是不确定的，会出现非预期行为。 ``` static void _mqtt_message_handler(void *pClient, MQTTMessage *message, void *userData) { if (message == NULL) { return; } if...

kydahe

QCLOUD_IOT_DEVICE_SDK_VERSION的版本号内容未修改

1

发布版本已经是3.2.3但是这里没有同步更新 /* IoT C-SDK version info */ #define QCLOUD_IOT_DEVICE_SDK_VERSION "3.2.2"

catch2001

PATH_MAX在Linux下编译出现重定义

1

环境： $ gcc --version gcc (GCC) 10.2.0 Copyright (c) 2020 Free Software Foundation, Inc. $ cat /proc/version CYGWIN_NT-10.0-17763 version 3.2.0-340.x86_64 (corinna@calimero) (gcc version 9.3.0 20200312 (Fedora Cygwin 9.3.0-1) (GCC) )...

catch2001

如何设置遗愿消息

1

有WillOptions的结构体.但是没有找到设置的地方

547394

原因：samples 的 CMakeLists.txt 第 22 行开始，只设置了 gcc 和 MSVC 的 lib，导致 arm-gcc 等其它 gcc 编译时找不到需要的库文件。 解决思路：用 CMAKE_C_COMPILER 表示目标编译工具，COMPILE_TOOLS 用来表示编译器。这样可以简化 CMakeLists.txt 里的配置，并可删除 CMakeLists.txt 里的第 97 行到 103 行，因为 Linux gcc 的...

hi-tangbin

Fixed the error in the return format when compiling and running in MinGW environment because '\0' was not added in the process of splicing strings.

Yangyuanxin

当前SDK中充斥着大量的不安全函数,例如sprintf之类的,应替换为snprintf的安全版本

Yangyuanxin

Add CodeQL Workflow for Code Security Analysis

1

# Summary This pull request introduces a CodeQL workflow to enhance the security analysis of this repository. # What is CodeQL CodeQL is a static analysis tool that helps identify...

b4yuan

[zcprotocol_best-t:2023-07-25T14:54:57.559] Info [QCloudThread(4121592944)][mqttcommapi.c log_handler 478]: ERR|2023-07-25 14:54:57|HAL_TLS_mbedtls.c|HAL_TLS_Read(378): cloud_iot_network_tls_read failed: 0x0000 [zcprotocol_best-t:2023-07-25T14:54:57.559] Info [QCloudThread(4121592944)][mqttcommapi.c log_handler 478]: ERR|2023-07-25 14:54:57|mqtt_client_yield.c|qcloud_iot_mqtt_yield(246): network read failed, rc: -708. MQTT Disconnect. [zcprotocol_best-t:2023-07-25T14:54:57.560] Info [QCloudThread(4121592944)][mqttcommapi.c log_handler 478]: ERR|2023-07-25...

luoyunyi