coap: Update to latest libcoap code (4.3.2rc1) (IEC-32)

[mrdeep1]

Checklist

• Component contains License
• Component contains README.md
• Component contains idf_component.yml file with url field defined
• Component was added to upload job
• Component was added to build job
• Optional: Component contains unit tests
• CI passing

Change description

Update libcoap to the latest version.

Code now builds if IPv4 or IPv6 is not available.

[mahavirj]

@mrdeep1

Thank you for taking care of this update!

Just wanted to inform you that we have been experimenting with the SBOM related tool to assist in monitoring the application against known security vulnerabilities. At this moment, if we run the tool against coap examples then it reports following vulnerabilities from coap component:

Following vulnerabilities were found. Further analysis may be required for confirmation.
CVEID:   CVE-2023-35862
CPE:     cpe:2.3:a:libcoap:libcoap:4.3.1:*:*:*:*:*:*:*
DETAIL:  https://nvd.nist.gov/vuln/detail/CVE-2023-35862
PACKAGE: submodule-./libcoap
SPDXID:  SPDXRef-SUBMODULE-coap-libcoap
libcoap 4.3.1 contains a buffer over-read via the function
coap_parse_oscore_conf_mem at coap_oscore.c.

CVEID:   CVE-2023-30362
CPE:     cpe:2.3:a:libcoap:libcoap:4.3.1:*:*:*:*:*:*:*
DETAIL:  https://nvd.nist.gov/vuln/detail/CVE-2023-30362
PACKAGE: submodule-./libcoap
SPDXID:  SPDXRef-SUBMODULE-coap-libcoap
Buffer Overflow vulnerability in coap_send function in libcoap library
4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to
obtain sensitive information via malformed pdu.

As I see that corresponding fixes have been merged upstream and hence with this PR, we should have clean run for the coap examples against any known security issues. Just FYI. Thanks.

[hmalpani]

I have done some static code analysis. Here are the results:

Example Version	DRAM .data	DRAM .bss	Flash .text	Flash .rodata	Flash Total
Coap Client(PR)	684	10358	47449	6602	54735
Coap Client(Master)	256	10890	47769	14160	62185
Coap Server(PR)	704	12022	56167	7674	64545
Coap Server(Master)	276	12678	60447	16280	77003

[mrdeep1]

I have done some static code analysis. Here are the results:

These look good. A large part will be down the removal of code for the higher level logging.

[mrdeep1]

Code changes pushed. Updated examples to easily support CoAP over WebSockets if WebSockets is enabled.

[mahavirj]

Minor comments, otherwise LGTM!

[mrdeep1]

Minor comments, otherwise LGTM!

Thanks for all your help in checking this through.