zephyr/subsys/bluetooth/controller
Alberto Escolar Piedras 08f6532b67 Bluetooth: Controller: Fix corruption during BIG_CHANNEL_MAP_IND
radio_pkt_big_ctrl_get() returns a statically allocated
buffer of type pdu_big_ctrl, but the callers expect a
buffer where a whole PDU for a BIG control packet can fit
(not just space for the payload),
and use it as such, overflowing this statically
allocated buffer, and smashing other variables after.

Let's fix it by allocating a buffer of the correct size
to fit a BIG control PDU.

Fixes https://github.com/zephyrproject-rtos/zephyr/issues/64497

Signed-off-by: Alberto Escolar Piedras <alberto.escolar.piedras@nordicsemi.no>
2023-10-30 18:36:39 +01:00
..
coex bluetooth: controller: coex: convert to DT device 2023-09-15 16:04:19 +02:00
crypto Bluetooth: Controller: Make PDU octet3 vendor specific 2023-01-26 13:25:11 +01:00
flash Bluetooth: Rework the HCI header set 2023-06-12 06:20:24 -04:00
hal Bluetooth: Controller: Add LL_ASSERT_OVERHEAD define 2023-06-29 17:16:47 +02:00
hci Bluetooth: Controller: Fix endianness issues for SyncInfo 2023-10-20 15:05:20 +02:00
include Bluetooth: Controller: Inherit BT_ISO_TX_MTU value 2023-06-29 10:06:19 +00:00
ll_sw Bluetooth: Controller: Fix corruption during BIG_CHANNEL_MAP_IND 2023-10-30 18:36:39 +01:00
ticker Bluetooth: Controller: Fix leak in scheduled ticker node 2023-10-06 12:54:12 +02:00
util Bluetooth: Controller: Fix some compiler instruction re-ordering 2023-09-14 14:30:36 +02:00
CMakeLists.txt drivers: flash: nRF: Move sync ticker to Subsys Bluetooth Controller 2023-03-21 12:33:32 +01:00
Kconfig Bluetooth: Controller: Kconfig: Move out BT_LL_SW_SPLIT configs 2023-10-20 15:03:46 +02:00
Kconfig.df Bluetooth: controller: Move DF feat selection to LL_SW_SPLIT KConfig 2023-05-24 16:41:21 +02:00
Kconfig.dtm
Kconfig.ll_sw_split Bluetooth: Controller: Kconfig: Move out BT_LL_SW_SPLIT configs 2023-10-20 15:03:46 +02:00