Betaflight CLI parser fixes target negative channel and range indexes
Betaflight PR 15988 says the aux, adjrange and vtx CLI commands previously checked upper bounds but not negative values returned by atoi(), allowing indexes such as -1 to select memory before an array. It proposes lower-bound validation.
Mon, 9 Nov 2026
A trusted configuration interface can still fail on malformed input, especially when command values are treated as unsigned or checked only against a maximum.
Check regression tests with invalid negative and extreme inputs. A PR is evidence of a reported defect, not a demonstrated remote attack.