RTEMS | cpukit/can: Fix out-of-bounds array access in ctucanfd (!1085)

MITHILESH MATTAPALLI (@mithileshm) gitlab at rtems.org
Thu Feb 26 11:34:51 UTC 2026



MITHILESH MATTAPALLI created a merge request: https://gitlab.rtems.org/rtems/rtos/rtems/-/merge_requests/1085

Project:Branches: mithileshm/rtems:fix-coverity-ctucanfd to rtems/rtos/rtems:main
Author:   MITHILESH MATTAPALLI



This patch adds strict bounds checking to txtb_id in ctucanfd_worker to prevent out-of-bounds writes to the txb_info array. If the ID exceeds internal-\>ntxbufs, the code now safely bypasses the hardware insert and falls back to scheduling the frame for later processing.

Fixes Coverity CID 1642617. 

Issue #5248.

AI Disclosure

None

-- 
View it on GitLab: https://gitlab.rtems.org/rtems/rtos/rtems/-/merge_requests/1085
You're receiving this email because of your account on gitlab.rtems.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rtems.org/pipermail/bugs/attachments/20260226/d32289da/attachment.htm>


More information about the bugs mailing list