Skip to content

Fix CYW43439 receive buffer overflow - #1094

Open
sqt wants to merge 1 commit into
ZigEmbeddedGroup:mainfrom
zz-iot:fix/cyw43439-receive-capacity
Open

sqt wants to merge 1 commit into
ZigEmbeddedGroup:mainfrom
zz-iot:fix/cyw43439-receive-capacity

Conversation

@sqt

@sqt sqt commented Oct 20, 2026

Copy link
Copy Markdown

Motivation

Control and join polling can receive Ethernet frames larger than their 1,024-byte buffers. Unchecked reads can overwrite the stack and crash firmware during WiFi recovery.

Description of changes

  • Size receive buffers for the maximum radio packet length, including alignment and trailing SPI status.
  • Reject insufficient buffer capacity before reading SPI.
  • Add a mock SPI regression covering oversized-packet rejection and full-frame reception during join polling.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant