mirror of
https://github.com/espressif/openthread.git
synced 2026-10-09 01:07:39 +00:00
[commissioning-dataset] add TLV validation in HandleCommissioningSet (#2193)
This commit adds a validation check when reading the Commissioning Session ID TLV in HandleCommissioningSet(). Credit to OSS-Fuzz.
This commit is contained in:
@@ -237,8 +237,11 @@ void Leader::HandleCommissioningSet(Coap::Header &aHeader, Message &aMessage, co
|
|||||||
}
|
}
|
||||||
else if (type == MeshCoP::Tlv::kCommissionerSessionId)
|
else if (type == MeshCoP::Tlv::kCommissionerSessionId)
|
||||||
{
|
{
|
||||||
|
MeshCoP::CommissionerSessionIdTlv *tlv = static_cast<MeshCoP::CommissionerSessionIdTlv *>(cur);
|
||||||
|
|
||||||
|
VerifyOrExit(tlv->IsValid());
|
||||||
|
sessionId = tlv->GetCommissionerSessionId();
|
||||||
hasSessionId = true;
|
hasSessionId = true;
|
||||||
sessionId = static_cast<MeshCoP::CommissionerSessionIdTlv *>(cur)->GetCommissionerSessionId();
|
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user