RTOS/RTX: Check if the mail given to osMailPut() is valid

CMSIS/RTOS/RTX/SRC/rt_CMSIS.c

@@ -2141,12 +2141,20 @@ osStatus osMailFree (osMailQId queue_id, void *mail) {
 
 /// Put a mail to a queue
 osStatus osMailPut (osMailQId queue_id, void *mail) {
+  void *pool;
+
   if (queue_id == NULL) {
     return osErrorParameter;
   }
   if (mail == NULL) {
     return osErrorValue;
   }
+
+  pool = *(((void **)queue_id) + 1);
+  if (rt_check_box (pool, mail) == 0) {
+    return osErrorValue;
+  }
+
   return osMessagePut(*((void **)queue_id), (uint32_t)mail, 0U);
 }
 

CMSIS/RTOS/RTX/SRC/rt_MemBox.c

@@ -163,6 +163,16 @@ U32 rt_free_box (void *box_mem, void *box) {
   return (0U);
 }
 
+/*--------------------------- rt_free_box -----------------------------------*/
+
+U32 rt_check_box (void *box_mem, void *box) {
+  if ((box < box_mem) || (box >= ((P_BM) box_mem)->end)) {
+    return (0U);
+  } else {
+    return (1U);
+  }
+}
+
 /*----------------------------------------------------------------------------
  * end of file
  *---------------------------------------------------------------------------*/

CMSIS/RTOS/RTX/SRC/rt_MemBox.h

@@ -39,6 +39,7 @@ extern U32     _init_box   (void *box_mem, U32 box_size, U32 blk_size);
 extern void *rt_alloc_box  (void *box_mem);
 extern void *  _calloc_box (void *box_mem);
 extern U32   rt_free_box   (void *box_mem, void *box);
+extern U32    rt_check_box (void *box_mem, void *box);
 
 /*----------------------------------------------------------------------------
  * end of file