fix: multiple memcpy calls in rf24network in RF24Network.cpp

[orbisai0security]

Summary

Fix critical severity security issue in raspberry/RF24Network_RPi/RF24Network/RF24Network.cpp.

Vulnerability

Field	Value
ID	V-001
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-001
File	raspberry/RF24Network_RPi/RF24Network/RF24Network.cpp:131

Description: Multiple memcpy calls in RF24Network.cpp use attacker-controlled size values (frame_size, bufsize) without validating that the size does not exceed the destination buffer capacity. At line 131, frame_size bytes are copied into next_frame without bounds checking. At line 191, bufsize bytes are copied into message without verifying bufsize does not exceed the destination buffer size. Because the RF24 radio layer has no authentication, any attacker within radio range can send malformed frames with crafted size values to trigger this overflow.

Changes

• raspberry/RF24Network_RPi/RF24Network/RF24Network.cpp

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security