radio_pkt_big_ctrl_get() returns a statically allocated buffer of type pdu_big_ctrl, but the callers expect a buffer where a whole PDU for a BIG control packet can fit (not just space for the payload), and use it as such, overflowing this statically allocated buffer, and smashing other variables after. Let's fix it by allocating a buffer of the correct size to fit a BIG control PDU. Fixes https://github.com/zephyrproject-rtos/zephyr/issues/64497 Signed-off-by: Alberto Escolar Piedras <alberto.escolar.piedras@nordicsemi.no> |
||
|---|---|---|
| .. | ||
| coex | ||
| crypto | ||
| flash | ||
| hal | ||
| hci | ||
| include | ||
| ll_sw | ||
| ticker | ||
| util | ||
| CMakeLists.txt | ||
| Kconfig | ||
| Kconfig.df | ||
| Kconfig.dtm | ||
| Kconfig.ll_sw_split | ||