Sören Tempel
06d572c2fc
asymcute: fix one byte out-of-bounds access in _len_get
...
As per Section 5.2.1 of the MQTT-SN specification, the MQTT-SN length
header is either 1- or 3-octet long. If it is 3-octet long then the
first octet is 0x01. The asymcute implementation currently only checks
that the incoming packet is at least 2-octet long before attempting to
parse it (MIN_PKT_LEN). However, if the first octet is 0x01 the packet
must be more than 3 octet long in order to be valid. Since asymcute
does not check this it reads one octet beyond the packet data for a
2-octet packet where the first octet has the value 0x01. This commit
fixes this issue by adding an additional sanity check to _len_get.
2022-08-10 05:41:10 +02:00
..
2021-02-22 14:54:14 +01:00
2021-02-22 14:54:14 +01:00
2022-01-17 13:42:41 +01:00
2022-05-03 16:06:22 +02:00
2021-02-22 14:54:14 +01:00
2022-02-08 12:52:48 +01:00
2022-08-11 10:57:55 +02:00
2022-03-08 10:28:31 +01:00
2021-02-22 14:54:14 +01:00
2022-03-11 09:24:12 +01:00
2022-01-10 12:21:40 +01:00
2021-02-22 14:54:14 +01:00
2022-03-04 09:35:50 +01:00
2021-03-05 16:47:53 +01:00
2022-06-07 09:25:04 +02:00
2022-08-05 13:08:52 +02:00
2022-01-13 17:50:59 +01:00
2022-01-07 11:14:10 +01:00
2021-12-15 18:58:23 +01:00
2021-08-13 19:50:38 +02:00
2021-02-22 14:54:14 +01:00
2022-04-14 17:10:24 +02:00
2021-12-14 13:24:29 +01:00
2022-04-12 16:01:50 +02:00
2022-06-10 11:02:40 +02:00
2022-06-12 19:39:27 +02:00
2021-12-09 16:44:19 +01:00
2021-08-13 19:50:38 +02:00
2022-08-12 09:58:18 +02:00
2022-05-02 23:23:52 +02:00
2021-12-07 13:00:58 +01:00
2021-12-10 18:54:29 +01:00
2021-01-26 17:40:30 +01:00
2022-02-15 12:28:16 +01:00
2021-02-22 14:54:14 +01:00
2021-02-22 14:54:14 +01:00
2021-02-22 14:54:14 +01:00
2022-08-10 05:41:10 +02:00
2022-03-24 11:36:49 +01:00
2022-03-11 09:20:24 +01:00
2021-02-22 14:54:15 +01:00
2022-05-19 07:29:51 +02:00
2021-10-20 11:21:57 +02:00
2022-04-06 12:29:25 +02:00
2022-05-18 07:27:23 +02:00
2021-04-07 12:05:00 +02:00
2021-12-07 16:31:15 +01:00
2022-07-26 19:46:14 +02:00
2022-04-14 11:53:31 +02:00
2021-12-20 13:04:20 +01:00
2022-07-10 21:27:13 +02:00
2022-08-01 16:28:12 +02:00
2022-05-23 08:35:27 +02:00
2021-11-11 13:18:52 +01:00
2021-12-07 16:31:15 +01:00
2022-03-10 14:19:44 +01:00
2022-02-11 12:38:21 +01:00
2021-02-22 14:54:15 +01:00
2022-08-04 16:14:29 +02:00
2022-06-08 13:01:23 +02:00
2022-04-27 10:10:32 +02:00
2021-12-07 10:04:04 +01:00
2021-11-03 11:39:26 +01:00
2022-01-03 16:14:11 +01:00
2022-07-17 14:29:39 +02:00
2022-07-22 15:57:20 +02:00
2021-02-22 14:54:15 +01:00
2022-03-17 14:33:07 +01:00
2021-06-14 09:04:25 +02:00
2021-11-24 17:54:44 +01:00
2022-05-11 21:15:55 +02:00
2022-01-09 17:58:38 +01:00
2021-12-06 09:05:37 +01:00
2021-12-09 11:20:44 +01:00
2022-05-19 23:23:49 +02:00
2022-08-03 22:09:21 +02:00
2022-03-18 08:23:00 +01:00
2022-06-07 08:51:10 +02:00
2022-03-01 11:03:10 +01:00
2022-08-11 10:57:55 +02:00
2022-03-24 11:36:49 +01:00
2021-10-01 11:26:15 +02:00
2022-07-22 16:06:36 +02:00
2022-08-11 10:57:54 +02:00
2022-08-12 09:58:18 +02:00
2022-08-11 10:57:54 +02:00