amateurfunk/hamnet70
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Fix one-byte buffer-overflow in layer1_rx_process()

Browse source
This commit is contained in:
Simon Ruderich 2024-04-27 12:16:49 +02:00
parent c250944d79
commit b3ceb50b23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
impl/src/layer1/rx.c
View file

@ -415,7 +415,7 @@ result_t layer1_rx_process(layer1_rx_t *rx, const float complex *samples, size_t
if(symbol_counter == rx->payload_len_symbols) { if(symbol_counter == rx->payload_len_symbols) {
unsigned int nsyms; unsigned int nsyms;
unsigned char payload_enc[rx->payload_len_enc_bytes]; unsigned char payload_enc[rx->payload_len_enc_bytes];
unsigned char payload[rx->payload_len_bytes]; unsigned char payload[rx->payload_len_bytes+1];
ERR_CHECK_LIQUID(liquid_repack_bytes( ERR_CHECK_LIQUID(liquid_repack_bytes(
symbols_int, modem_get_bps(rx->payload_demod), rx->payload_len_symbols, symbols_int, modem_get_bps(rx->payload_demod), rx->payload_len_symbols,