bluerobotics / bluerobotics/blueberry-transcode-firmware
Bounds checking quietly returns zero when out of bounds
- Dominant language
- C
- Stars
- 0
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
the bbWrap funcion in blueberry-transcoder.c simply returns zero if the specified index is out of bounds of the buffer.
This causes an out-of-bounds write to paste over index zero of the buffer, which is probably not a great thing.
probably should think of something else to do that is more detectible.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start in blueberry-transcoder.c at the bbWrap function and trace its callers to understand how an out-of-bounds result becomes a write to index zero. Determine the intended detectable failure behavior with the project maintainers, then verify that invalid indices cannot overwrite the buffer and that valid indexing remains unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- embedded-iot
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100