amateurfunk/hamnet70
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

rx: fix overflow in symbol buffer

Browse source
This commit is contained in:
Thomas Kolb 2024-01-03 00:01:27 +01:00
parent ef0fad4335
commit 497498acd2
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
impl/src/layer1/rx.c
View file

@ -14,6 +14,8 @@
#include "utils.h" #include "utils.h"
#define SYMBOL_BUFFER_SIZE 16384
#define HEADER_SIZE_BYTES 4 #define HEADER_SIZE_BYTES 4
#define FREQ_EST_L 24 #define FREQ_EST_L 24
@ -139,7 +141,7 @@ static bool acquire_preamble(layer1_rx_t *rx, const float complex sample)
result_t layer1_rx_process(layer1_rx_t *rx, const float complex *samples, size_t sample_count) result_t layer1_rx_process(layer1_rx_t *rx, const float complex *samples, size_t sample_count)
{ {
static size_t symbol_counter = 0; static size_t symbol_counter = 0;
static uint8_t symbols_int[1 << 12]; static uint8_t symbols_int[SYMBOL_BUFFER_SIZE];
float complex samples2dump[sample_count]; float complex samples2dump[sample_count];
size_t nsamples2dump = 0; size_t nsamples2dump = 0;
@ -245,6 +247,14 @@ result_t layer1_rx_process(layer1_rx_t *rx, const float complex *samples, size_t
rx->payload_len_enc_bytes = fec_get_enc_msg_length(PAYLOAD_CHANNEL_CODE, rx->payload_len_bytes); rx->payload_len_enc_bytes = fec_get_enc_msg_length(PAYLOAD_CHANNEL_CODE, rx->payload_len_bytes);
rx->payload_len_symbols = (rx->payload_len_enc_bytes * 8 + payload_bps - 1) / payload_bps; rx->payload_len_symbols = (rx->payload_len_enc_bytes * 8 + payload_bps - 1) / payload_bps;
if(rx->payload_len_symbols > SYMBOL_BUFFER_SIZE) {
DEBUG_LOG("Symbol count %u is too lange for buffer. Ignoring packet.\n", rx->payload_len_symbols);
rx->state = RX_STATE_ACQUISITION;
break;
}
assert(rx->payload_len_symbols < sizeof(symbols_int)/sizeof(symbols_int[0]));
DEBUG_LOG("=== DECODED HEADER ===\n"); DEBUG_LOG("=== DECODED HEADER ===\n");
DEBUG_LOG("Payload length: %u symbols, %u bytes encoded, %u bytes decoded\n", rx->payload_len_symbols, rx->payload_len_enc_bytes, rx->payload_len_bytes); DEBUG_LOG("Payload length: %u symbols, %u bytes encoded, %u bytes decoded\n", rx->payload_len_symbols, rx->payload_len_enc_bytes, rx->payload_len_bytes);
DEBUG_LOG("CRC16: 0x%04x\n", rx->payload_crc); DEBUG_LOG("CRC16: 0x%04x\n", rx->payload_crc);