Headline

CVE-2023-30463: Releases · tass-belgium/picotcp

Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.

1 year ago

CVE

Open in Source

#windows #linux #dos #git

picoTCP v1.7.0

It’s been way too long in the making, but it’s finally here : picoTCP v 1.7.0.
This is the first time the code is being released under both GPLv2 and GPLv3.
We’ve also improved the example code in the README.md, and clarified our use of a Contributors License Agreement.

Too many code changes to enumerate them all, but the most important changes are :

6LoWPAN support
fixed many issues reported by coverity scan
removed potential memory leaks (especially in case of failing mallocs, i.e. out-of-memory situations)
many code quality improvements, internal refactorings
limited hotplug detection support (currently only on SLAACv4)
improved Bonjour conformance (not there yet, but getting closer)
improvement in DNS response parsing
various other bugfixes

for more, please run git log :-)

prpl demo code

A pre-compiled version of picoTCP intended for the prpl demo.

Note that this is not a production-quality release.

The binary was built using the command
make clean; make CROSS_COMPILE=mips-mti-elf- PLATFORM_CFLAGS="-EL -O2 -c -Wa,-mvirt -mips32r2 -mtune=m14k -mno-check-zero-division -msoft-float -fshort-double -ffreestanding -nostdlib -fomit-frame-pointer -G 0" DHCP_SERVER=0 SLAACV4=0 TFTP=0 AODV=0 IPV6=0 NAT=0 PING=1 ICMP4=1 DNS_CLIENT=0 MDNS=0 DNS_SD=0 SNTP_CLIENT=0 ARCH=pic32

PicoTCP v1.6.2

picoTCP v1.6.2 - hotfixes release.

Changelog:

fixed bug when using picotcp-memory manager where the wrong pico_free was called

PicoTCP v1.6.1

picoTCP v1.6.1 - hotfixes release.

Changelog:

fixed compiler warning for unused parameter
fixed unit tests (IGMP, MLD, PPP-CHAP)

PicoTCP v1.6

PicoTCP v1.6.0 - Release Notes

Fixed major bug in timers, when timers are canceled and allocator reuses the address
Several bugfixes in PPP module
PPP: Added support for PAP
Improved C89 compatibility: support for Watcom DOS compiler
Several bugfixes in TCP
Support for TCP LINGER
Support for TCP KeepAlive mechanism
TCP: ensure the socket is destroyed upon connection abort from peer (RST)
Support for Multicast IPv6 + MLD
Improved IGMP support
DHCP client: support for hostname and domain name
DHCP client: avoid adding 0.0.0.0 nameservers
IPv4: ensure that broadcast frames are not forwarded
IPv6: Fixed forwarding
Overall TioBE TICS score improved