Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(ble_mesh): fixed BLE-Mesh NimBLE extended-adv reassembly buffer overflow on COMPLETE fragment

Browse Source 
(cherry picked from commit 1b22467f63)

Co-authored-by: luoxu <luoxu@espressif.com>
This commit is contained in:
Luo Xu
2026-07-06 17:43:42 +08:00
parent f9da09de61
commit 9aef1fc224
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/bt/esp_ble_mesh/core/nimble_host/adapter.c
+4
View File
@@ -538,6 +538,10 @@ int disc_cb(struct ble_gap_event *event, void *arg)
switch (desc->data_status) { switch (desc->data_status) {
case BLE_GAP_EXT_ADV_DATA_STATUS_COMPLETE: case BLE_GAP_EXT_ADV_DATA_STATUS_COMPLETE:
if (adv_report_cache.adv_data_len) { if (adv_report_cache.adv_data_len) {
if (adv_report_cache.adv_data_len + desc->length_data > BLE_MESH_GAP_ADV_MAX_LEN) {
memset(&adv_report_cache, 0, sizeof(adv_report_cache));
return false;
}
memcpy(adv_report_cache.adv_data + adv_report_cache.adv_data_len, memcpy(adv_report_cache.adv_data + adv_report_cache.adv_data_len,
desc->data, desc->length_data); desc->data, desc->length_data);
adv_report_cache.adv_data_len += desc->length_data; adv_report_cache.adv_data_len += desc->length_data;