espressif/openthread
1
0
Fork 0
mirror of https://github.com/espressif/openthread.git synced 2026-08-17 16:09:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

[mle] add array bound check to avoid overflow in HandleDataRequest() (#8002)

Browse Source
This commit is contained in:
Abtin Keshavarzian
2022-08-10 10:26:41 -07:00
committed by GitHub
parent 3c38af22b4
commit 3a31a5f368
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/core/thread/mle_router.cpp
+8 -2
View File
@@ -2882,7 +2882,10 @@ void MleRouter::HandleDataRequest(RxInfo &aRxInfo)
OT_FALL_THROUGH;
case kErrorNotFound:
tlvs[numTlvs++] = Tlv::kActiveDataset;
if (numTlvs < sizeof(tlvs))
{
tlvs[numTlvs++] = Tlv::kActiveDataset;
}
break;
default:
@@ -2901,7 +2904,10 @@ void MleRouter::HandleDataRequest(RxInfo &aRxInfo)
OT_FALL_THROUGH;
case kErrorNotFound:
tlvs[numTlvs++] = Tlv::kPendingDataset;
if (numTlvs < sizeof(tlvs))
{
tlvs[numTlvs++] = Tlv::kPendingDataset;
}
break;
default: