[network-data] add bounds check when comparing server data (#3781)

This commit is contained in:
Jonathan Hui
2019-04-24 10:17:07 -07:00
committed by GitHub
parent 4e45b45796
commit c972c5cb93
@@ -694,6 +694,8 @@ bool Leader::IsStableUpdated(uint8_t *aTlvs, uint8_t aTlvsLength, uint8_t *aTlvs
{
ServerTlv *serverBase = static_cast<ServerTlv *>(curServerBase);
VerifyOrExit((curServerBase + 1) <= endServerBase && curServerBase->GetNext() <= end);
if (curServerBase->IsStable() && (server->GetServer16() == serverBase->GetServer16()) &&
(server->GetServerDataLength() == serverBase->GetServerDataLength()) &&
(memcmp(server->GetServerData(), serverBase->GetServerData(),