All pull requests

Pull requests

• [Messaging] Add support of RDK Logger via an external direct backend

  #2269·VeithMetro opened Sep 29, 2026Contributor·

  ·
  13

• Fix/variant container move assert

  #2268·workkavint-ship-it opened Sep 29, 2026Contributor·

  ·
  13

• [Security][High] SecureSocketPort: enable TLS peer verification by default (RDKEMW-25897)

  #2267·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] URL: add static_assert on MaximumURLLength for stack safety (RDKEMW-25896)

  #2266·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] FileSystem: add O_NOFOLLOW to File::Create (RDKEMW-25895)

  #2265·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Config: restrict COM-RPC socket to owner+group (0660) (RDKEMW-25894)

  #2264·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] CORS: replace wildcard Access-Control-Allow-Origin with origin validation (RDKEMW-25893)

  #2263·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] JSONWebToken: cap header size before alloca (RDKEMW-25892)

  #2262·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Service: block IDispatcher handout over COM-RPC (RDKEMW-25891)

  #2261·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] JSON-RPC: verify designator callsign matches URL-path service (RDKEMW-25890)

  #2260·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] IPCConnector: guard varint _length against underflow (RDKEMW-25889)

  #2259·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Messages: add bounds checking to Frame::Deserialize (RDKEMW-25888)

  #2258·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] CreateStarter: validate remote address for Distributed mode (RDKEMW-25887)

  #2257·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] FileSystem: fix Normalize dot-segment collapse after dot-prefixed segments (RDKEMW-25886)

  #2256·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Controller: harden DELETE Persistent path containment (RDKEMW-25885)

  #2255·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Service: validate EnableWebServer paths against traversal (RDKEMW-25884)

  #2254·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Service: validate SystemRootPath setter against traversal (RDKEMW-25883)

  #2253·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] GetLibrarySearchPaths: reject locators with path traversal (RDKEMW-25882)

  #2252·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] DefaultSecurity: secure-by-default when no SecurityAgent loaded (RDKEMW-25881)

  #2251·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][High] Config: restrict COM-RPC socket permissions from 0777 to 0660 (RDKEMW-25880)

  #2250·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][Critical] Controller: add audit logging to Harakiri reboot endpoint (RDKEMW-25878)

  #2249·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][Critical] ServiceMap: gate Acquire on privileged interface IDs (RDKEMW-25877)

  #2248·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][Critical] DefaultSecurity: keep security active when no SECURITY claimant (RDKEMW-25876)

  #2247·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][Critical] WebSocket: enforce RFC 6455 control frame payload limit (RDKEMW-25875)

  #2246·andrejz2 opened Sep 28, 2026·

  ·
  1

• [Security][Critical] Controller: sanitize callsign in Clone to prevent path traversal (RDKEMW-25874)

  #2245·andrejz2 opened Sep 28, 2026·

  ·
  1