cw2007/POSA_LEAKSMS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
POSA_LEAKSMS/firmware/common
History
유창욱 90f121e14c chore: import codebase with security hardening 
SHT30 온습도 모니터링 시스템 전체 소스(서버 PHP, STM32 펌웨어, SQL, 테스트).
전체 코드리뷰에서 도출된 보안 하드닝 10건 반영:
- 요청 서명 HMAC-SHA256 전환(펌웨어 sig.c/서버 config.php/호스트 패리티 동시)
- 재전송 방어 + 기본 API_KEY fail-closed + 디바이스 문자열 정제(api/sensor_data.php)
- 오프라인 SMS 중복 발송 경합 제거(cron_heartbeat.php, 원자적 선점)
- CSV 수식 주입 방지(monthly_report.php), 감사로그 회전 락(retention_cleanup.php)
- 브루트포스 카운터 원자화(login.php), 예시 TOTP 비밀키 무효화, 마이그레이션 멱등화

_backup/(하드코딩 실 비밀값 포함)·config.local.php·런타임 상태는 .gitignore 제외.
2026-06-20 09:37:40 +09:00
..
app_config.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
applog.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
applog.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
board_config.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
bsp.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
bsp.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
ethernetif.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
hexutil.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
hexutil.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
httpapi.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
httpapi.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
jsonbody.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
jsonbody.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
net.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
net.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
reporter.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
reporter.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
rtos_hooks.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
secrets.h.example chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sha256_backend.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sha256_sw.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30_convert.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30_convert.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sig.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sig.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
timesync.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
timesync.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
tls.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
tls_mbedtls.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
transport.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
watchdog.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
watchdog.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00