Wire: limit TX buffer size to avoid consuming too much stack

If data size to be sent is greater than the max defined,
application can split the transfert
Note: no limit implemented in RX buffer, because when receiving,
data are received on I2C, it is not possible to split.

Fixes #1539

Signed-off-by: Alexandre Bourdiol <alexandre.bourdiol@st.com>

Author: ABOSTM

libraries/Wire/src/Wire.cpp

@@ -289,9 +289,10 @@ size_t TwoWire::write(uint8_t data)
   size_t ret = 1;
   if (transmitting) {
     // in master transmitter mode
-    allocateTxBuffer(txDataSize + 1);
+    if (allocateTxBuffer(txDataSize + 1) == 0) {
+      ret = 0;
+    } else if (txBuffer == nullptr) {
     // error if no memory block available to allocate the buffer
-    if (txBuffer == nullptr) {
       setWriteError();
       ret = 0;
     } else {
@@ -323,9 +324,10 @@ size_t TwoWire::write(const uint8_t *data, size_t quantity)
 
   if (transmitting) {
     // in master transmitter mode
-    allocateTxBuffer(txDataSize + quantity);
-    // error if no memory block available to allocate the buffer
-    if (txBuffer == nullptr) {
+    if (allocateTxBuffer(txDataSize + quantity) == 0) {
+      ret = 0;
+    } else if (txBuffer == nullptr) {
+      // error if no memory block available to allocate the buffer
       setWriteError();
       ret = 0;
     } else {
@@ -479,9 +481,12 @@ void TwoWire::allocateRxBuffer(size_t length)
   }
 }
 
-inline void TwoWire::allocateTxBuffer(size_t length)
+inline size_t TwoWire::allocateTxBuffer(size_t length)
 {
-  if (txBufferAllocated < length) {
+  size_t ret = length;
+  if (length > WIRE_MAX_TX_BUFF_LENGTH) {
+    ret = 0;
+  } else if (txBufferAllocated < length) {
     // By default we allocate BUFFER_LENGTH bytes. It is the min size of the buffer.
     if (length < BUFFER_LENGTH) {
       length = BUFFER_LENGTH;
@@ -494,6 +499,7 @@ inline void TwoWire::allocateTxBuffer(size_t length)
       _Error_Handler("No enough memory! (%i)\n", length);
     }
   }
+  return ret;
 }
 
 /**

libraries/Wire/src/Wire.h

@@ -28,7 +28,12 @@ extern "C" {
 #include "utility/twi.h"
 }
 
+// Minimal buffer length. Buffers length will be increased when needed,
+// but TX buffer is limited to a maximum to avoid too much stack consumption
 #define BUFFER_LENGTH 32
+#if !defined(WIRE_MAX_TX_BUFF_LENGTH)
+  #define WIRE_MAX_TX_BUFF_LENGTH       1000U
+#endif
 
 // WIRE_HAS_END means Wire has end()
 #define WIRE_HAS_END 1
@@ -56,7 +61,7 @@ class TwoWire : public Stream {
     static void onReceiveService(i2c_t *);
 
     void allocateRxBuffer(size_t length);
-    void allocateTxBuffer(size_t length);
+    size_t allocateTxBuffer(size_t length);
 
     void resetRxBuffer(void);
     void resetTxBuffer(void);