tree 82c9c988b55f55d217bae1020d423e50906ab27b
parent 83e56c38ee181357a3a95ece7b57c515fed70d2b
author Srikanth Patchava <srpatcha@users.noreply.github.com> 1781584447 -0700
committer Aniruddha Kanhere <kanherea@amazon.com> 1781905486 -0700

fix: TOCTOU race condition in vTaskListTasks()

Read uxCurrentNumberOfTasks once into uxArraySize and use that local
variable for both the size check and pvPortMalloc() call. The previous
code read the volatile variable twice, allowing a task to be created
between the reads, resulting in an undersized allocation that could
cause a buffer overflow in uxTaskGetSystemState().