Flipper Zero Firmware Stack Overflow Vulnerability in Main Function

A stack overflow vulnerability has been identified in the Flipper Zero firmware, specifically in the main function of the code. This issue arises from a fixed stack allocation of 1024 bytes, which is insufficient for certain execution scenarios that may require up to 1464 bytes. The vulnerability was introduced in commit ad2a80 and potentially affects earlier versions as well.

Impact

Exploitation of this vulnerability can lead to a system crash or undefined behavior.

Reproduction

The vulnerability can be reproduced by enabling stack usage analysis in the build process. After building the firmware with the appropriate configuration, the generated stack usage files will reveal that the main function's call chain exceeds the allocated stack size, particularly under conditions where a crash is handled.

Remediation

The vulnerability has been addressed in a subsequent commit by increasing the stack allocation for the main function to a safer level.