CHERIoT-Platform / CHERIoT-Platform/network-stack
MQTT contains many `check_pointer` calls without claiming them first
- Dominant language
- C++
- Stars
- 9
- Forks
- 14
- Avg merge
- 6d 17h
- Merged PRs (30d)
- 1
Description
The `CheriotHeapChecker` static analysis reports these as errors, but @davidchisnall points out that this code is a mostly intended to be a sandbox where we could just let things crash.
We do one of the following:
* add the proper claims where needed, if we want this code to be defensively safe.
* strip out the `check_pointer` calls to save on code size, if we want this code to just crash on error.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the MQTT code's check_pointer calls and reviewing the CheriotHeapChecker errors they produce. Determine with maintainers whether this sandbox should add claims or remove the checks; done means the chosen policy is applied consistently and the static analysis no longer reports these errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- networking, security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100