* companion: onRawDataRecv() guard for payload_len too long

2025-04-11 14:12:09 +10:00
parent a5f210779f
commit 366461a3a1
1 changed files with 4 additions and 0 deletions
--- a/examples/companion_radio/main.cpp
+++ b/examples/companion_radio/main.cpp
@@ -663,6 +663,10 @@ protected:
  }

  void onRawDataRecv(mesh::Packet* packet) override {
+    if (packet->payload_len + 4 > sizeof(out_frame)) {
+      MESH_DEBUG_PRINTLN("onRawDataRecv(), payload_len too long: %d", packet->payload_len);
+      return;
+    }
    int i = 0;
    out_frame[i++] = PUSH_CODE_RAW_DATA;
    out_frame[i++] = (int8_t)(_radio->getLastSNR() * 4);