CHERIoT-Platform / CHERIoT-Platform/network-stack
MQTT documentation frets about UAF/UAR
Open
- Dominant language
- C++
- Stars
- 9
- Forks
- 14
- Avg merge
- 6d 17h
- Merged PRs (30d)
- 1
Description
https://github.com/CHERIoT-Platform/network-stack/blob/d7f260d7d52c621677d6c70568bb1bc629d9b328/include/mqtt.h#L149-L151
That sounds like a UAF/UAR issue that shouldn't be an information leak on CHERIoT? Do I misunderstand?
Contributor guide
No contributing guide indexed for this repository
Research direction
The issue points to include/mqtt.h lines 149-151. Read that comment in the context of the MQTT API, then investigate whether the stated UAF/UAR information-leak concern applies on CHERIoT. Done means resolving the question and, if needed, correcting or clarifying the documentation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 38/100