bluerobotics / bluerobotics/blueberry-transcode-firmware

Bounds checking quietly returns zero when out of bounds

Open
#2 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
0
Forks
2
PR merge metrics
No merged PRs in 30d

Description

the bbWrap funcion in blueberry-transcoder.c simply returns zero if the specified index is out of bounds of the buffer.

This causes an out-of-bounds write to paste over index zero of the buffer, which is probably not a great thing.

probably should think of something else to do that is more detectible.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start in blueberry-transcoder.c at the bbWrap function and trace its callers to understand how an out-of-bounds result becomes a write to index zero. Determine the intended detectable failure behavior with the project maintainers, then verify that invalid indices cannot overwrite the buffer and that valid indexing remains unchanged.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
embedded-iot
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.