Skip to content
Commit 7305e109 authored by Sylvio Alves's avatar Sylvio Alves Committed by Benjamin Cabé
Browse files

bluetooth: esp32: make LE discardability length-safe



Determine event discardability after parsing the HCI header and require
at least one byte before reading the LE subevent. This removes a possible
OOB read on malformed/short LE Meta events. Also mark LE Extended
Advertising Report as discardable, matching legacy Advertising Report to
reduce RX pool pressure during heavy scanning.

Signed-off-by: default avatarSylvio Alves <sylvio.alves@espressif.com>
parent 089df601
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment