From 430034214e880d34e51b85147fff0b98199d219f Mon Sep 17 00:00:00 2001 From: Jonathan Hui Date: Wed, 6 May 2026 10:35:15 -0700 Subject: [PATCH] [mesh-forwarder] enhance EID-RLOC cache updates (#13054) Gate `MeshForwarder::UpdateEidRlocCacheAndStaleChild` on link security, ensuring that the received frame has security enabled. Adding the link security check ensures that only fully authenticated data frames (successfully decrypted and verified at the MAC layer) can influence the EID-to-RLOC cache and the child table states. --- src/core/thread/mesh_forwarder_ftd.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/src/core/thread/mesh_forwarder_ftd.cpp b/src/core/thread/mesh_forwarder_ftd.cpp index 8399f9991..56144adae 100644 --- a/src/core/thread/mesh_forwarder_ftd.cpp +++ b/src/core/thread/mesh_forwarder_ftd.cpp @@ -669,6 +669,7 @@ void MeshForwarder::UpdateEidRlocCacheAndStaleChild(RxInfo &aRxInfo) { Neighbor *neighbor; + VerifyOrExit(aRxInfo.IsLinkSecurityEnabled()); VerifyOrExit(!aRxInfo.GetDstAddr().IsBroadcast() && aRxInfo.GetSrcAddr().IsShort()); SuccessOrExit(aRxInfo.ParseIp6Headers());