Description
The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MB_TCP_BUF_SIZE limit.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cwalter-at | FreeModbus | — | — |
References
- https://github.com/cwalter-at/freemodbus third-party-advisory
- https://github.com/cwalter-at/freemodbus/blob/master/demo/LINUXTCP/port/porttcp.c third-party-advisory