Skip to content

fix: the queue implementation performs two memcpy op... in modxo_queue.c#77

Open
orbisai0security wants to merge 1 commit into
Team-Resurgent:mainfrom
orbisai0security:fix-v-001-modxo-queue-item-size-bounds-check
Open

fix: the queue implementation performs two memcpy op... in modxo_queue.c#77
orbisai0security wants to merge 1 commit into
Team-Resurgent:mainfrom
orbisai0security:fix-v-001-modxo-queue-item-size-bounds-check

Conversation

@orbisai0security
Copy link
Copy Markdown

Summary

Fix critical severity security issue in modxo/modxo_queue.c.

Vulnerability

Field Value
ID V-001
Severity CRITICAL
Scanner multi_agent_ai
Rule V-001
File modxo/modxo_queue.c:49

Description: The queue implementation performs two memcpy operations using queue->item_size as the copy length without validating that item_size is within the bounds of the destination buffer. If queue->item_size is corrupted or set to a value larger than the allocated queue slot, the memcpy at line 49 (enqueue) and line 61 (dequeue) will overflow the destination buffer, corrupting adjacent heap or stack memory on the embedded target.

Changes

  • modxo/modxo_queue.c

Verification

  • Build passes
  • Scanner re-scan confirms fix
  • LLM code review passed

Automated security fix by OrbisAI Security

Automated security fix generated by Orbis Security AI
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant