fuota_packges buffers can overflow

[MpmTwtg]

The ans_index is able to overflow fmp_tx_payload_ans.

SWL2001/smtc_modem_core/lorawan_packages/fuota_packages/lorawan_fmp_package.c

Line 498 in 45e19e5

ctx->fmp_tx_payload_ans[ans_index++] = FMP_PKG_VERSION_ANS;

The reason behind this is that it loops and can fill the buffer as long ass there are msg's, but the buffer is as big as the biggest package.

SWL2001/smtc_modem_core/lorawan_packages/fuota_packages/lorawan_fmp_package.c

Line 490 in 45e19e5

while( fmp_package_rx_buffer_length > fmp_package_rx_buffer_index )

SWL2001/smtc_modem_core/lorawan_packages/fuota_packages/lorawan_fmp_package.c

Line 188 in 45e19e5

uint8_t fmp_tx_payload_ans[FMP_SIZE_ANS_MAX];

This can also happen in
lorawan_fragmentation_package.c
and possible in remote_multicast_tx_payload_ans
The same problems occurs in fuota_packages_v2

[lbm-team]

Thank you for your feedback, this issue will be fixed in the next release

[lbm-team]

Hi @MpmTwtg

This issue is now fixed in new v4.3.0 release and mentioned in CHANGELOG.

Once more thanks for your report