CentSDR Stack Overflow Vulnerability in Thread1 Function

A stack overflow vulnerability has been identified in the CentSDR project, specifically in the Thread1 function of commit e40795. The vulnerability arises from a fixed stack allocation of 128 bytes, which is insufficient for the worst-case call chain that may require approximately 224 bytes of stack space under certain configurations. This mismatch can lead to a stack overflow during execution.

Impact

Exploitation of this vulnerability may cause a system crash or result in undefined behavior.

Reproduction

To reproduce this vulnerability, enable stack usage analysis by adding '-fstack-usage' to the compiler flags. After building the project, inspect the generated '.su' files to observe that the Thread1 call chain exceeds the allocated stack size.