New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MQTT documentation frets about UAF/UAR #57

Open

nwf opened this issue Jan 8, 2025 · 0 comments

Member

nwf commented Jan 8, 2025

network-stack/include/mqtt.h

Lines 149 to 151 in d7f260d

    
            * this function. If the caller frees them during the execution of this 
        
            * function, the publish may leak application data to the broker through the 
        
            * topic and payload.

That sounds like a UAF/UAR issue that shouldn't be an information leak on CHERIoT? Do I misunderstand?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment