Thomas Göttgens 80f972655d Null-check reply allocations in allocErrorResponse and RemoteHardware (#11260) ...

allocAckNak returns nullptr when the packet pool is exhausted, but allocErrorResponse passed the result straight to setReplyTo, which dereferences it. Reachable unauthenticated: an ADMIN_APP packet on a known-key channel takes the NOT_AUTHORIZED path, so a flood that empties the pool crashes the node. MemoryDynamic::alloc no longer aborting on failure made this reachable on PSRAM, STM32WL and Portduino targets. Callers already treat a null reply as no response. Same fix for the two RemoteHardwareModule sites.

2026-07-27 14:54:57 -04:00

5.4 KiB

Raw Blame History

View Raw