From b3ceb50b239747d5d7aea97f4de646a5e7b8b13b Mon Sep 17 00:00:00 2001 From: Simon Ruderich Date: Sat, 27 Apr 2024 12:16:49 +0200 Subject: [PATCH] Fix one-byte buffer-overflow in layer1_rx_process() --- impl/src/layer1/rx.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/impl/src/layer1/rx.c b/impl/src/layer1/rx.c index f33b5d9..d90a0f6 100644 --- a/impl/src/layer1/rx.c +++ b/impl/src/layer1/rx.c @@ -415,7 +415,7 @@ result_t layer1_rx_process(layer1_rx_t *rx, const float complex *samples, size_t if(symbol_counter == rx->payload_len_symbols) { unsigned int nsyms; unsigned char payload_enc[rx->payload_len_enc_bytes]; - unsigned char payload[rx->payload_len_bytes]; + unsigned char payload[rx->payload_len_bytes+1]; ERR_CHECK_LIQUID(liquid_repack_bytes( symbols_int, modem_get_bps(rx->payload_demod), rx->payload_len_symbols,