core: fix buffer overflows, deadlocks, and races in core#2925

Merged

julianoes merged 25 commits into

mainfrom

fix-core-memory-safety-and-concurrency

Jul 15, 2026

Commits on Jul 14, 2026

core: fix out-of-bounds read in MavlinkFtpServer::_data_as_string
julianoes
committed
core: fix out-of-bounds read on non-terminated PARAM_EXT_SET custom value
julianoes
committed
core: avoid std::stoi terminate() when parsing metadata uri component id
julianoes
committed
core: lock _system_ids when inserting from the libmav receive path
julianoes
committed
core: check fopen result before using it in download_file_to_path
julianoes
committed
core: cancel pending timeouts in MavlinkRequestMessage destructor
julianoes
committed
core: fix message matching in MavlinkRequestMessage::handle_any_message
julianoes
committed
core: fix erase-remove idiom in unregister_statustext_handler
julianoes
committed
core: guard MavsdkImpl::_configuration with a dedicated mutex
julianoes
committed
core: fix FTP server deadlock joining burst thread while holding _mutex
julianoes
committed
core: don't invoke param subscription callbacks under _all_params_mutex
julianoes
committed
core: send PARAM_ERROR for missing/wrong-type non-extended PARAM_SET
julianoes
committed
core: check ofstream (not ifstream) after seekp in FTP _work_write
julianoes
committed
core: guard against NULL getpwuid() in get_cache_directory
julianoes
committed

Commits on Jul 15, 2026