zephyr/subsys/bluetooth/controller
Alberto Escolar Piedras 08f6532b67 Bluetooth: Controller: Fix corruption during BIG_CHANNEL_MAP_IND
radio_pkt_big_ctrl_get() returns a statically allocated
buffer of type pdu_big_ctrl, but the callers expect a
buffer where a whole PDU for a BIG control packet can fit
(not just space for the payload),
and use it as such, overflowing this statically
allocated buffer, and smashing other variables after.

Let's fix it by allocating a buffer of the correct size
to fit a BIG control PDU.

Fixes https://github.com/zephyrproject-rtos/zephyr/issues/64497

Signed-off-by: Alberto Escolar Piedras <alberto.escolar.piedras@nordicsemi.no>
2023-10-30 18:36:39 +01:00
..
coex bluetooth: controller: coex: convert to DT device 2023-09-15 16:04:19 +02:00
crypto
flash Bluetooth: Rework the HCI header set 2023-06-12 06:20:24 -04:00
hal Bluetooth: Controller: Add LL_ASSERT_OVERHEAD define 2023-06-29 17:16:47 +02:00
hci Bluetooth: Controller: Fix endianness issues for SyncInfo 2023-10-20 15:05:20 +02:00
include Bluetooth: Controller: Inherit BT_ISO_TX_MTU value 2023-06-29 10:06:19 +00:00
ll_sw Bluetooth: Controller: Fix corruption during BIG_CHANNEL_MAP_IND 2023-10-30 18:36:39 +01:00
ticker Bluetooth: Controller: Fix leak in scheduled ticker node 2023-10-06 12:54:12 +02:00
util Bluetooth: Controller: Fix some compiler instruction re-ordering 2023-09-14 14:30:36 +02:00
CMakeLists.txt
Kconfig Bluetooth: Controller: Kconfig: Move out BT_LL_SW_SPLIT configs 2023-10-20 15:03:46 +02:00
Kconfig.df Bluetooth: controller: Move DF feat selection to LL_SW_SPLIT KConfig 2023-05-24 16:41:21 +02:00
Kconfig.dtm
Kconfig.ll_sw_split Bluetooth: Controller: Kconfig: Move out BT_LL_SW_SPLIT configs 2023-10-20 15:03:46 +02:00