Commit d6f2858a authored by Andy Gross's avatar Andy Gross Committed by Maureen Helm
Browse files

doc: relnotes: Add security vulnerability information 

This patch adds notes for the security related changes going into
release 1.12.

Signed-off-by: default avatarAndy Gross <andy.gross@linaro.org>
parent c63298ea

doc/release-notes-1.12.rst

+12 −0
Changes for doc/release-notes-1.12.rst: 12 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -24,6 +24,18 @@ Major enhancements with this release include: 


The following sections provide detailed lists of changes by component.



Security Vulnerability Related

******************************



* A suitably sized k_malloc() request can result in a smaller than

  requested buffer.  Use of that buffer could result in writes to

  unallocated memory.  Proper overflow checks were added to fix this

  issue in k_malloc and k_calloc.



  * kernel: mempool: Check for overflow in k_malloc()

  * kernel: mempool: Always check for overflow in k_calloc()

  * tests: mempool: Add overflow checks



Kernel

******

CRA Git | Maintained and supported by SUSTech CRA and CCSE