ra8_nsc_eth.c

Go to the documentation of this file.

 
#include <stdint.h>
 
#include "ra8_check.h"
#include "ra8_err.h"
#include "ra8_net_pal.h"
#include "ra8_nsc.h"
#include "ra8_nsc_veneer.h"
 
static const char* s_tag = "NSCETH";

RA8_NSC_VENEER ra8_err_t ra8_nsc_eth_send(const uint8_t* ns_frame, uint16_t len)
{
  RA8_CHECK_NULL_PTR(ns_frame, s_tag, "eth_send: ns_frame");
  if ((len == 0U) || (len > (uint16_t)k_ra8_nsc_eth_frame_max)) {
    return k_ra8_err_invalid_arg;
  }
  RA8_NSC_CHECK_NS_RANGE_R(ns_frame, len);
  return ra8_net_pal_send_frame(ns_frame, len);
}

RA8_NSC_VENEER ra8_err_t ra8_nsc_eth_recv(uint8_t* ns_buf, uint16_t* inout_len)
{
  RA8_CHECK_NULL_PTR(ns_buf, s_tag, "eth_recv: ns_buf");
  RA8_CHECK_NULL_PTR(inout_len, s_tag, "eth_recv: inout_len");
  /* Range-validate the NS caller's inout_len pointer BEFORE dereferencing it.
   * A hostile NS caller could aim inout_len at Secure memory; the capacity read
   * below would then read Secure state. cmse_check_address_range exists to
   * prevent exactly this deref-before-check ordering (T5-07). */
  RA8_NSC_CHECK_NS_RANGE_RW(inout_len, sizeof(*inout_len));
  if (*inout_len < (uint16_t)k_ra8_nsc_eth_frame_max) {
    return k_ra8_err_invalid_arg;
  }
  RA8_NSC_CHECK_NS_RANGE_RW(ns_buf, *inout_len);
  return ra8_net_pal_recv_frame(ns_buf, inout_len);
}