rooty/LibrePilot
1
0
Fork 0
mirror of https://bitbucket.org/librepilot/librepilot.git synced 2025-02-26 15:54:15 +01:00
Code Issues Releases Activity

LP-458 uploadtool: fix crash if received packet size is 0

Browse Source 
this should not happen during a normal conversation
but can happen if a particular sequence of garbage is received
This commit is contained in:
Philippe Renon 2017-01-25 23:21:39 +01:00
parent 41b3b39dae
commit 8320c295ef
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ground/gcs/src/experimental/USB_UPLOAD_TOOL/SSP/qssp.cpp
View File

@ -524,6 +524,7 @@ uint16_t qssp::sf_crc16(uint16_t crc, uint8_t data)
{
#ifdef SPP_USES_CRC
return (crc >> 8) ^ CRC_TABLE[(crc ^ data) & 0x00FF];
#else
uint8_t cka = crc & 0xff;
uint8_t ckb = (crc >> 8) & 0xff;
@ -658,6 +659,12 @@ int16_t qssp::sf_DecodeState(uint8_t c)
retval = SSP_RX_IDLE;
break;
case decode_len1_e:
if (c == 0) {
thisport->DecodeState = decode_idle_e;
thisport->RxError++;
retval = SSP_RX_IDLE;
break;
}
thisport->rxBuf[LENGTH] = c;
thisport->rxBufLen = c;
if (thisport->rxBufLen <= thisport->rxBufSize) {