Skip to content

RDKB-65720: CCI crash during beacon data parsing (#34)#36

Open
rranga540 wants to merge 1 commit into
rdkcentral:mainfrom
rranga540:beacon_crash_main
Open

RDKB-65720: CCI crash during beacon data parsing (#34)#36
rranga540 wants to merge 1 commit into
rdkcentral:mainfrom
rranga540:beacon_crash_main

Conversation

@rranga540

Copy link
Copy Markdown
Contributor

Impacted Platforms: TXB7, TXB8, VXB10, SXB10
Reason for change: Failed to parse the start_ap_data
Test Procedure: Trigger any VAP configuration test case from CCI.
Risks: Low
Priority: P2

Signed off by: RaviShankar.R_Rangaraj@comcast.com

Impacted Platforms: TXB7, TXB8, VXB10, SXB10
Reason for change: Failed to parse the start_ap_data
Test Procedure: Trigger any VAP configuration test case from CCI.
Risks: Low
Priority: P2

Signed off by: RaviShankar.R_Rangaraj@comcast.com
Copilot AI review requested due to automatic review settings July 3, 2026 07:07

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Fixes a crash seen on multiple RDKB platforms when parsing cfg80211 start_ap (beacon) messages by aligning the parser with the actual message layout and storing SSID information in the message data structure.

Changes:

  • Parse SSID length and SSID bytes in handle_cfg80211_start_ap() before reading beacon head/tail lengths.
  • Add SSID buffer and ssid_len fields to the wlan_emu_cfg80211_start_ap_t message structure.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
src/messages/wlan_emu_msg_hdlr.cpp Updates cfg80211 start_ap parsing to include SSID length/data before beacon head/tail parsing.
inc/wlan_emu_msg_data.h Extends start_ap message struct to carry SSID and its length.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +33 to +37
if (f_data->u.cfg80211.u.start_ap.ssid_len > sizeof(f_data->u.cfg80211.u.start_ap.ssid)) {
wlan_emu_print(wlan_emu_log_level_err, "%s:%d: ssid_len %zu exceeds buffer size\n",
__func__, __LINE__, f_data->u.cfg80211.u.start_ap.ssid_len);
return;
}
Comment on lines +38 to 42
memcpy(f_data->u.cfg80211.u.start_ap.ssid, f_tmp,
f_data->u.cfg80211.u.start_ap.ssid_len);
f_tmp += f_data->u.cfg80211.u.start_ap.ssid_len;

memcpy(&(f_data->u.cfg80211.u.start_ap.head_len), f_tmp, sizeof(size_t));
Comment thread inc/wlan_emu_msg_data.h
Comment on lines +86 to +87
char ssid[32];
size_t ssid_len;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants