mckero/uv-k1-k5v3-firmware-custom
1
0 Fork 0
mirror of https://github.com/armel/uv-k1-k5v3-firmware-custom.git synced 2026-10-02 03:15:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Strengthening input boundary validation and preventing memory disclosure

Browse Source
This commit is contained in:
Armel FAUVEAU committed 2026-08-24 19:41:20 +02:00
1 parent 265f83a447
commit ce6bf08b23
4 files changed
+26 -15
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

App/app/aircopy.c
+9 -7
View File
@@ -88,13 +88,14 @@ DECLARE_AIRCOPY_BANK(1)
// For settings only
static const AIRCOPY_Segment_t AIRCOPY_Segments_Settings[] = {
{ 0xA000, 0xA170, AIRCOPY_WRITE_BYTES },
{ 0x880E, 0x886E, AIRCOPY_WRITE_BYTES },
{ 0x9000, 0x90E5, AIRCOPY_WRITE_BYTES }, // VFO area (full 14 VFOs 0x9000..0x90E0) +
// Fox Hunt settings tail 0x90E0..0x90E5
// Ends are rounded to full Aircopy blocks. The extra bytes are unmapped
// EEPROM-compat holes (0x90E0..0x90E6 is the complete Fox Hunt tail).
{ 0xA000, 0xA180, AIRCOPY_WRITE_BYTES },
{ 0x880E, 0x888E, AIRCOPY_WRITE_BYTES },
{ 0x9000, 0x9100, AIRCOPY_WRITE_BYTES },
};
// total_blocks = ceil(0x170/64) + ceil(0x60/64) + ceil(0xE5/64) = 6 + 2 + 4 = 12
// total_blocks = 0x180/64 + 0x80/64 + 0x100/64 = 6 + 2 + 4 = 12
static const AIRCOPY_TransferMap_t AIRCOPY_Map_Settings = {
.segments = AIRCOPY_Segments_Settings,
.num_segments = 3,
@@ -154,7 +155,8 @@ static inline const AIRCOPY_Segment_t *AIRCOPY_FindSegmentForOffset(uint16_t off
{
const AIRCOPY_Segment_t *seg = &map->segments[i];
if (off >= seg->start_offset && off < seg->end_offset)
if (off >= seg->start_offset && off < seg->end_offset &&
((off - seg->start_offset) & (AIRCOPY_BLOCK_SIZE - 1u)) == 0u)
return seg;
}
@@ -426,4 +428,4 @@ void AIRCOPY_ProcessKeys(KEY_Code_t Key, bool bKeyPressed, bool bKeyHeld)
gRequestDisplayScreen = DISPLAY_AIRCOPY;
}
#endif
#endif