raiden00pl opened a new pull request, #21004:
URL: https://github.com/apache/nuttx/pull/21004
## Summary
The MAC character device copied a frame's payload into the IOB before
MCPS-DATA checked its length, so a long payload was written past the end of the
IOB. It also leaked
that IOB when the TX meta-data was invalid. Frames that don't fit the IOB
are now rejected, and the IOB is freed on both errors.
## Impact
A frame larger than the IOB now fails with -E2BIG instead of corrupting
memory
## Testing
nRF52840-DK, nRF54LM20-DK and nRF52832-DK with MRF24J40: i8sak and 6LoWPAN
traffic through the MAC.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
