guard , if someone wanted to break pm3 simulation.... which is very like not to happen

2026-05-27 12:16:04 +00:00 · 2026-03-24 19:03:13 +07:00
parent 2ccfa06386
commit d1a6ef4704
1 changed files with 5 additions and 0 deletions
@@ -795,6 +795,11 @@ void SimulateSeos(seos_emulate_req_t *msg) {
                                }

                                uint8_t cmac_size = recvd_cmac_length;
+                                if (cmac_size > 16) {
+                                    Dbprintf(_RED_("Get Data failed") ": CMAC size invalid.");
+                                    break;
+                                }
+
                                if (!generate_cmac(diver_cmac_key, mac_input, mac_input_idx, cmac, msg->encr_alg)) {
                                    Dbprintf(_RED_("Get Data failed") ": Failed to create reply CMAC.");
                                    break;