ArduPilot seeks bounds checking for Marvelmind beacon packets
ArduPilot PR 35024, opened late 4 November, says the Marvelmind beacon parser could accept datagram lengths larger than its input buffer. The author reports manual fake-UART and SITL tests showing rejection of oversized length headers after the patch.
Thu, 5 Nov 2026
A malformed indoor-positioning packet should be rejected before it reaches memory outside a fixed receive buffer.
This is an open contribution without committed automated tests or actual hardware tests. Do not infer remote exploitability beyond the specific parser defect the PR documents.