Ramon Roche 4e6e2c059c fix(mavlink): reject path traversal sequences in FTP operations ...

Add _validatePath() that rejects paths containing ".." components,
preventing directory traversal outside the FTP root directory.
Applied to all FTP operation handlers (list, open, remove, truncate,
rename, mkdir, rmdir, CRC32).

Fixes GHSA-fh32-qxj9-x32f, GHSA-pm28-2j4f-8jxv

Signed-off-by: Ramon Roche <mrpollo@gmail.com>

2026-03-13 09:31:20 -07:00

..

airship_att_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

airspeed_selector

AirspeedValidator: fix course over ground computation for NED frame (#26304)

2026-02-26 09:18:09 +01:00

attitude_estimator_q

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

battery_status

battery: remove unused param BAT_I_CHANNEL (#26590)

2026-03-02 13:28:14 -09:00

camera_feedback

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

commander

ESC check cleanup

2026-03-12 18:30:51 +01:00

control_allocator

refactor(control_allocation): Clarify and enforce that motors are in matrix 0

2026-03-09 17:10:32 +01:00

dataman

dataman: increase stack size for littlefs

2026-02-10 15:23:51 +13:00

ekf2

fix(build): resolve Dependabot security alerts (#26729)

2026-03-12 12:40:35 -07:00

esc_battery

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

events

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

flight_mode_manager

CI: enable clang-tidy bugprone-incorrect-roundings (#26574)

2026-02-24 13:16:33 -09:00

fw_att_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

fw_autotune_attitude_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

fw_lateral_longitudinal_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

fw_mode_manager

CI: enable clang-tidy bugprone-incorrect-roundings (#26574)

2026-02-24 13:16:33 -09:00

fw_rate_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

gimbal

docs:Fix in-source broken links in modules and airframes ref (#26611)

2026-03-02 18:18:00 +11:00

gyro_calibration

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

gyro_fft

fix(ci): clang-tidy bugprone-too-small-loop-variable(#26709)

2026-03-11 08:18:53 -07:00

hardfault_stream

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

internal_combustion_engine_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

land_detector

Remove MPC_USE_HTE and always use hover thrust for altitude control (#24751)

2026-02-19 11:17:57 -09:00

landing_target_estimator

fix files tags on the header comments (#23564)

2024-09-19 09:25:18 +03:00

load_mon

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

local_position_estimator

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

logger

logger: add sensor_gnss_relative to High Rate Sensors

2026-03-04 10:10:16 -09:00

mag_bias_estimator

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

manual_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

mavlink

fix(mavlink): reject path traversal sequences in FTP operations

2026-03-13 09:31:20 -07:00

mc_att_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

mc_autotune_attitude_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

mc_hover_thrust_estimator

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

mc_nn_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

mc_pos_control

Remove MPC_USE_HTE and always use hover thrust for altitude control (#24751)

2026-02-19 11:17:57 -09:00

mc_raptor

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

mc_rate_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

muorb

voxl2: add system reboot support

2026-02-23 11:25:13 -07:00

navigator

fix(navigator): fix alt setpoint after home-alt reset (#26662)

2026-03-09 15:39:21 +01:00

payload_deliverer

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

px4iofirmware

feat(heater): Add multi-instance support for heaters (#26325)

2026-03-02 12:13:08 -09:00

rc_update

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

replay

docs:Fix in-source broken links in modules and airframes ref (#26611)

2026-03-02 18:18:00 +11:00

rover_ackermann

rover: guard computeMaxSpeedFromDistance against disabled decel/jerk limits (#26452)

2026-02-19 15:52:41 -05:00

rover_differential

rover: guard computeMaxSpeedFromDistance against disabled decel/jerk limits (#26452)

2026-02-19 15:52:41 -05:00

rover_mecanum

rover: guard computeMaxSpeedFromDistance against disabled decel/jerk limits (#26452)

2026-02-19 15:52:41 -05:00

sensors

fix(ci): clang-tidy bugprone-too-small-loop-variable(#26709)

2026-03-11 08:18:53 -07:00

simulation

fix(simulation): use correlated gauss-markov noise for SIH-GPS (#26697)

2026-03-09 11:39:29 -08:00

spacecraft

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

task_watchdog

modules: add task watchdog (#26535)

2026-02-27 13:09:21 +01:00

temperature_compensation

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

time_persistor

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

uuv_att_control

module_base: remove CRTP template pattern to reduce flash bloat (#26476)

2026-02-19 15:17:17 +13:00

uuv_pos_control

BlueROV2 Height control Altitude Mode (#26364)

2026-02-20 22:46:12 -08:00

uxrce_dds_client

fix: revert debugging section of distance_sensor in dds-subscription (#26643)

2026-03-04 11:33:48 +01:00

vtol_att_control

CI: enable clang-tidy bugprone-incorrect-roundings (#26574)

2026-02-24 13:16:33 -09:00

zenoh

zenoh: fix default config topic type to use actual uORB topic name (#26564)

2026-03-05 17:32:14 -09:00

Kconfig

[Kconfig] Decompose Kconfig, now each module has its own Kconfig

2021-10-07 10:09:01 -04:00