[utilities][rt-link] bound long-frame reassembly against allocation size

Record the allocated buffer length in struct rt_link_record::dataspace_size and enforce bounds checking during long-frame receive reassembly:
- Validate extend.parameter in _long_handle_first() (must be non-zero and at most RT_LINK_FRAMES_MAX * RT_LINK_MAX_DATA_LENGTH), aborting cleanly on invalid length or allocation failure.
- Validate data_len <= RT_LINK_MAX_DATA_LENGTH, index < RT_LINK_FRAMES_MAX and index < total, and overflow-safe offset + data_len <= dataspace_size before rt_link_hw_copy() in _long_handle_second(), aborting cleanly on bounds violation and passing dataspace_size to rt_link_recv_finish().
- Clear dataspace_size on all paths that release or reset dataspace.
- Reject data frames whose head.length exceeds RT_LINK_MAX_DATA_LENGTH in rt_link_frame_check() to align the receive path with rt_link_send().

Fix #12030

0 files changed, 0 insertions, 0 deletions