dandri/ZephCore
1
0
Fork 0
mirror of https://github.com/liquidraver/ZephCore.git synced 2026-10-15 13:50:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

length guards for dispatcher

Browse Source
This commit is contained in:
liquidraver
2026-09-21 10:06:59 +02:00
parent 1aa629c9f1
commit 4bf5ccd397
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
zephcore/src/Dispatcher.cpp
+4
View File
@@ -260,6 +260,9 @@ uint32_t Dispatcher::msUntilNextMaintenance()
bool Dispatcher::tryParsePacket(Packet *pkt, const uint8_t *raw, int len)
{
/* Check the received extent before reading header/path fields. The radio
* buffer may be larger than len, but bytes outside len are not packet data. */
if (len < 2 || len > MAX_TRANS_UNIT) return false;
int i = 0;
pkt->header = raw[i++];
@@ -269,6 +272,7 @@ bool Dispatcher::tryParsePacket(Packet *pkt, const uint8_t *raw, int len)
}
if (pkt->hasTransportCodes()) {
if (len < 6) return false; /* header + two codes + path length */
memcpy(&pkt->transport_codes[0], &raw[i], 2); i += 2;
memcpy(&pkt->transport_codes[1], &raw[i], 2); i += 2;
} else {