[tlvs] add length check in Tlv::Find for extended tlvs (#4176)

2026-07-26 13:59:05 +00:00 · 2019-09-17 17:11:15 -07:00
parent ebf665eb6a
commit 767a8eb9bb
1 changed files with 2 additions and 0 deletions
@@ -128,6 +128,8 @@ otError Tlv::Find(const Message &aMessage, uint8_t aType, uint16_t *aOffset, uin

            VerifyOrExit(sizeof(ExtendedTlv) <= remainingLen);
            aMessage.Read(offset, sizeof(ExtendedTlv), &extTlv);
+
+            VerifyOrExit(extTlv.GetLength() <= (remainingLen - sizeof(ExtendedTlv)));
            size = extTlv.GetSize();
        }