controller/ble_ll_sync.c: acad_len potentially uninitialised
acad_len in ble_ll_sync_rx_pkt_in is filled in ble_ll_sync_parse_ext_hdr
and later accessed in ble_ll_sync_check_acad. There is a possibility
that extended advertising header is missing data containing acad, and it
will not get filled, leaving it uninitialised.
diff --git a/nimble/controller/src/ble_ll_sync.c b/nimble/controller/src/ble_ll_sync.c
index 31c8ec0..d15f1df 100644
--- a/nimble/controller/src/ble_ll_sync.c
+++ b/nimble/controller/src/ble_ll_sync.c
@@ -1136,7 +1136,7 @@
int8_t tx_power = 127; /* defaults to not available */
uint8_t *aux = NULL;
uint8_t *acad = NULL;
- uint8_t acad_len;
+ uint8_t acad_len = 0;
const uint8_t *biginfo = NULL;
uint8_t biginfo_len = 0;
int datalen;
