easy

icon company tencent icon location sz cn

Results 1 issues of easy

rt_can_read memory write out of boundary

1 comment

function _can_int_rx in components/drivers/can/can.c /* read from software FIFO */ while (msgs) { ... rt_memcpy(data, &listmsg->data, sizeof(struct rt_can_msg)); ... data ++; msgs -= sizeof(struct rt_can_msg); } didn't validate the data...