You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
It was possible for a third party that had already independently gained the ability to execute injected code to achieve further privilege escalation by branching directly inside a FreeRTOS MPU API wrapper function with a manually crafted stack frame. This commit removes the local stack variable `xRunningPrivileged` so that a manually crafted stack frame cannot be used for privilege escalation by branching directly inside a FreeRTOS MPU API wrapper. We thank Certibit Consulting, LLC, Huazhong University of Science and Technology and the SecLab team at Northeastern University for reporting this issue. Signed-off-by: Gaurav Aggarwal <aggarg@amazon.com> |
2 years ago | |
---|---|---|
.. | ||
ISSUE_TEMPLATE | 3 years ago | |
actions | 4 years ago | |
scripts | 4 years ago | |
workflows | 3 years ago | |
CODEOWNERS | 4 years ago | |
CONTRIBUTING.md | 4 years ago | |
SECURITY.md | 4 years ago | |
lexicon.txt | 2 years ago | |
pull_request_template.md | 5 years ago | |
uncrustify.cfg | 3 years ago |