Skip to content

fix(secret-provider-agent): improve robustness of provider agent #43

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aghiles-ait merged 5 commits into from
Nov 19, 2025
Merged

fix(secret-provider-agent): improve robustness of provider agent #43

Changes from 2 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
17175d7
fix: add NULL check to adppId
aghiles-ait Nov 18, 2025
84ea09b
fix: add control on ip address and port
aghiles-ait Nov 18, 2025
8d08c54
fix: enforce const on immutable values
aghiles-ait Nov 19, 2025
bcbd018
fix: enforce const on immutable values
aghiles-ait Nov 19, 2025
4488df8
fix: replace strtok with strchr to avoid modifying sbsEndpoint variable
aghiles-ait Nov 19, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 20 additions & 4 deletions cvmassistants/secretprovider/secret-provider-agent/src/secret_provider_agent.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -317,6 +317,11 @@ int main(int argc, char** argv) {

LOG_INFO("Selected log level %d", log_level);

if (app_id == NULL) {
LOG_ERROR("App ID is missing");
return -1;
}

if (sbs_endpoint == NULL) {
LOG_ERROR("SBS mode must provide sbsEndpoint argument (--sbsEndpoint/-e)");
return -1;
Expand All @@ -325,14 +330,25 @@ int main(int argc, char** argv) {
LOG_DEBUG("Config of SBS endpoint is %s", sbs_endpoint);

srv_ip = strtok(sbs_endpoint, ":");
if (srv_ip == NULL) {
LOG_ERROR("sbsEndpoint format error: missing IP address, eg: 127.0.0.1");
return -1;
}else{
struct in_addr test_addr;
if (inet_pton(AF_INET, srv_ip, &test_addr) != 1) {
LOG_ERROR("Invalid IP address format: %s", srv_ip);
return -1;
}
}

str_port = strtok(NULL, ":");
if (NULL == str_port) {
LOG_ERROR("sbsEndpoint format error, eg: 127.0.0.1:5443");
if (str_port == NULL) {
LOG_ERROR("sbsEndpoint format error: missing port, eg: 5443");
return -1;
}
port = atoi(str_port);
if (port == 0) {
LOG_ERROR("Port is invalid, got %s", str_port);
if (port <= 0 || port > 65535) {
LOG_ERROR("Port is invalid or out of valid range (1-65535), got %d", port);
return -1;
}

Expand Down