CHERIoT-Platform / CHERIoT-Platform/network-stack

MQTT contains many `check_pointer` calls without claiming them first

Open
#118 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
9
Forks
14
Avg merge
6d 17h
Merged PRs (30d)
1

Description

The `CheriotHeapChecker` static analysis reports these as errors, but @davidchisnall points out that this code is a mostly intended to be a sandbox where we could just let things crash.

We do one of the following:
* add the proper claims where needed, if we want this code to be defensively safe.
* strip out the `check_pointer` calls to save on code size, if we want this code to just crash on error.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the MQTT code's check_pointer calls and reviewing the CheriotHeapChecker errors they produce. Determine with maintainers whether this sandbox should add claims or remove the checks; done means the chosen policy is applied consistently and the static analysis no longer reports these errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
networking, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.