espressif/openthread
1
0
Fork 0
mirror of https://github.com/espressif/openthread.git synced 2026-08-19 08:59:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

[network-data] avoid buffer overflow in HandleCommissioningSet() (#4583)

Browse Source 
Reject Commissioner Dataset TLVs with extended TLV length.
This commit is contained in:
Jonathan Hui
2020-02-21 11:17:05 -08:00
parent ea09b6e064
commit 167d616bc2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/core/thread/network_data_leader_ftd.cpp
+1 -1
View File
@@ -206,7 +206,7 @@ void Leader::HandleCommissioningSet(Coap::Message &aMessage, const Ip6::MessageI
{
MeshCoP::Tlv::Type type;
VerifyOrExit((cur + 1) <= end && cur->GetNext() <= end);
VerifyOrExit(((cur + 1) <= end) && !cur->IsExtended() && (cur->GetNext() <= end));
type = cur->GetType();