zephyr/subsys/bluetooth/controller
Joakim Andersson 66d339a7c9 Bluetooth: controller: Fix scanner memory corruption
Fix a bug where the controller would use the length
field of the advertisement packet before checking
if the length field was valid.
It is possible that the controller has received a packet
that passes CRC check but has a length field that is invalid.
This would cause the scanner to overwrite the scan report
buffer

Fixes: #14741
Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
2019-03-22 13:58:24 +01:00
..
crypto Bluetooth: Switch from SYS_LOG to logger-based logging 2018-10-19 14:50:22 +02:00
hal Bluetooth: controller: Prepare to introduce LL split architecture 2019-01-07 13:42:01 +01:00
hci Bluetooth: controller: Convert benign BT_WARN() messages to BT_DBG() 2019-03-19 18:17:41 +02:00
include Bluetooth: controller: Preliminary work in progress mesh ext. 2019-01-23 09:45:06 +01:00
ll_sw Bluetooth: controller: Fix scanner memory corruption 2019-03-22 13:58:24 +01:00
ticker bluetooth: controller: Add a few ticker comments 2019-02-15 09:52:14 -05:00
util bluetooth: controller: Document more of memq, mfifo 2019-02-15 09:49:45 -05:00
CMakeLists.txt Bluetooth: controller: Remove redundant tmp role implementation 2019-02-05 15:00:08 +01:00
Kconfig Bluetooth: controller: Fix PHY bits sets with PHY disabled 2019-03-19 16:34:55 +02:00