[riot-notifications] [RIOT-OS/RIOT] Missing drop implementations in netdev_driver_t::recv (#10410)

Joakim NohlgÄrd notifications at github.com
Fri Nov 16 13:55:33 CET 2018


If the kw2xdrf radio works like the kw41zrf radio, then the buffer may be overwritten whenever the first byte has been read, so there's a race condition bug waiting to happen where reading the size removes the frame buffer write protection, and a new frame is received before the actual read out of the frame buffer has been done in the second call to recv.
kw41zrf solves this by switching to standby after a completed RX, but there is also a PB_PROTECT bit which can be used to write protect the RX buffer which I did not know about until recently. I have not explored this protection bit in #7107 however.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/RIOT-OS/RIOT/issues/10410#issuecomment-439384723
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riot-os.org/pipermail/notifications/attachments/20181116/1494ab90/attachment-0001.html>


More information about the notifications mailing list