Skip to content

Merge changes ahead of the 202504 release#239

Merged
fdesbiens merged 18 commits intomasterfrom
dev
Jan 12, 2026
Merged

Merge changes ahead of the 202504 release#239
fdesbiens merged 18 commits intomasterfrom
dev

Conversation

@fdesbiens
Copy link
Contributor

No description provided.

rahmanih and others added 18 commits November 20, 2025 18:14
…cursion

- Add a partition entry counter (ux_host_class_storage_mounted_partitions_count)
   and a configurable maximum (UX_HOST_CLASS_STORAGE_MAX_PARTITIONS_COUNT) to limit
   the number of partition entries processed during mounting.

- Counter is incremented for every partition entry, and checked both before and during the partition parsing loop.
- If the limit is exceeded, the function aborts and returns UX_HOST_CLASS_STORAGE_ERROR_MEDIA_NOT_READ.
- This prevents stack overflow and infinite recursion in case of malformed or cyclic MBR/EBR partition tables.
- Default partition entry limit set to 8 by default for safety and compatibility with typical devices.

Fixes CVE-2025-55095

Signed-off-by: Haithem Rahmani <haithem.rahmani@st.com>
Add usbx device hid mouse rtos and standalone demo.
fix typo ALIGNMENT -> ALIGNMENT
expose UX_ENABLE_DEBUG_LOG  option in ux_user_sample.h
Add check for optional device hid out endpoint
…log_enabled

Improvement of UX_ENABLE_DEBUG_LOG  option
Use the UX prefix instead of TX to avoid a compilation issue in standalone mode
Terminate the hid host interrupt out endpoint on deactivate
fix (host/storage): prevent stack overflow from infinite partition recursion
@fdesbiens fdesbiens merged commit 83e508f into master Jan 12, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants