Merge pull request ruvnet#310 from orbisai0security/fix-v002-display-buffer-uaf

ruvnet · web-flow · commit 430243c32c82 · 2026-04-03T09:01:41.000-04:00
fix: remove unsafe exec() in display_task.c
diff --git a/firmware/esp32-csi-node/main/display_task.c b/firmware/esp32-csi-node/main/display_task.c
@@ -118,8 +118,14 @@ esp_err_t display_task_start(void)
     if (!buf1 || !buf2) {
         ESP_LOGE(TAG, "Failed to allocate LVGL buffers (%u bytes, caps=0x%lx)",
                  (unsigned)buf_size, (unsigned long)alloc_caps);
-        if (buf1) free(buf1);
-        if (buf2) free(buf2);
+        if (buf1) {
+            free(buf1);
+            buf1 = NULL;
+        }
+        if (buf2) {
+            free(buf2);
+            buf2 = NULL;
+        }
         return ESP_OK;
     }
     ESP_LOGI(TAG, "LVGL buffers: 2x %u bytes (%u lines, %s)",
