Out of bounds memory write in nrfx_gpiote_in_uninit with new pinhttps://devzone.nordicsemi.com/f/nordic-q-a/57032/out-of-bounds-memory-write-in-nrfx_gpiote_in_uninit-with-new-pinThe following code has an unexpected out-of-bounds array access: Primary cause is this line: On an uninitalized pin number, channel_port_get() returns -1, which is converted to 255 via the cast and this causes out of bounds access in channel_freeen-USTelligent Community 13Tue, 02 Mar 2021 16:38:20 GMTRE: Out of bounds memory write in nrfx_gpiote_in_uninit with new pinhttps://devzone.nordicsemi.com/thread/297283?ContentTypeID=1Tue, 02 Mar 2021 16:38:20 GMT137ad170-7792-4731-bb38-c0d22fbe4515:05a976fb-eb1c-4ed0-af86-5a79bd7a79b6kobyfr<p>also happens in SDK 17.0.2 and SDK 15.3</p> <p>should modify&nbsp;nrfx_gpiote_in_uninit from this</p> <p></p> <p><pre class="ui-code" data-mode="text">void nrfx_gpiote_in_uninit(nrfx_gpiote_pin_t pin) { NRFX_ASSERT(nrf_gpio_pin_present_check(pin)); NRFX_ASSERT(pin_in_use_by_gpiote(pin)); nrfx_gpiote_in_event_disable(pin); if (pin_in_use_by_te(pin)) { nrf_gpiote_te_default((uint32_t)channel_port_get(pin)); } if (pin_configured_check(pin)) { nrf_gpio_cfg_default(pin); pin_configured_clear(pin); } channel_free((uint8_t)channel_port_get(pin)); pin_in_use_clear(pin); }</pre></p> <p>to this</p> <p><pre class="ui-code" data-mode="text">void nrfx_gpiote_in_uninit(nrfx_gpiote_pin_t pin) { NRFX_ASSERT(nrf_gpio_pin_present_check(pin)); NRFX_ASSERT(pin_in_use_by_gpiote(pin)); nrfx_gpiote_in_event_disable(pin); if (pin_in_use_by_te(pin)) { nrf_gpiote_te_default((uint32_t)channel_port_get(pin)); } if (pin_configured_check(pin)) { nrf_gpio_cfg_default(pin); pin_configured_clear(pin); } if ( pin_in_use(pin) ) { channel_free((uint8_t)channel_port_get(pin)); pin_in_use_clear(pin); } } </pre></p><div style="clear:both;"></div>RE: Out of bounds memory write in nrfx_gpiote_in_uninit with new pinhttps://devzone.nordicsemi.com/thread/231305?ContentTypeID=1Tue, 28 Jan 2020 08:03:28 GMT137ad170-7792-4731-bb38-c0d22fbe4515:c8004d7f-3432-4aa2-89d4-28d192b44062Einar Thorsrud<p>Hi,</p> <p>Thank you for reporting. I have created an internal ticket so that this can be fixed in a future SDK (and nrfx) release.</p><div style="clear:both;"></div>