Skip to content

fix: Life Safety Zone member handling for write property - #1410

Merged
skarg merged 2 commits into
masterfrom
bugfix/denial-of-service-in-life-safety-zone-write-property-zone-members
Jun 27, 2026
Merged

fix: Life Safety Zone member handling for write property#1410
skarg merged 2 commits into
masterfrom
bugfix/denial-of-service-in-life-safety-zone-write-property-zone-members

Conversation

@skarg

@skarg skarg commented Jun 27, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes Life_Safety_Zone handling for PROP_ZONE_MEMBERS WriteProperty so that malformed/misaligned payloads don’t partially update the object’s Zone Members list, and adds regression tests to lock in the expected decode/commit behavior.

Changes:

  • Update Life_Safety_Zone_Members_Write() to fully validate/stage decoded Zone Members before committing them to the object.
  • Fix Life_Safety_Zone_Members_Add() to correctly interpret Keylist_Data_Add() return values and free allocations on add failure.
  • Add Zephyr ztest regression coverage for Zone Members WriteProperty decode edge cases (zero-length decode, truncated data, malformed tail, multi-element).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
test/bacnet/basic/object/lsz/src/main.c Adds helper routines and regression ztests for Zone Members WriteProperty decode/commit behavior.
src/bacnet/basic/object/lsz.c Makes Zone Members writes transactional (stage then commit) and fixes add failure handling to avoid leaks/false-success.

Comment thread test/bacnet/basic/object/lsz/src/main.c
Comment thread test/bacnet/basic/object/lsz/src/main.c
@skarg
skarg merged commit 4db7d76 into master Jun 27, 2026
36 checks passed
@skarg
skarg deleted the bugfix/denial-of-service-in-life-safety-zone-write-property-zone-members branch June 27, 2026 19:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants