patrick/zephyr
1
0
Fork 0
Code Issues Pull requests Actions 8 Packages Projects Releases Wiki Activity

net: socket: mgmt: Check buf size in recvfrom()

Browse source 
Return EMSGSIZE if trying to copy too much data into
user supplied buffer.

Signed-off-by: Jukka Rissanen <jukka.rissanen@nordicsemi.no>
This commit is contained in:
Jukka Rissanen 2023-10-10 13:40:08 +03:00 committed by Johan Hedberg
parent 2f79f5e992
commit 0a16d5c7c3
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
subsys/net/lib/sockets/sockets_net_mgmt.c
View file

@ -209,8 +209,12 @@ again:
if (info) {
ret = info_len + sizeof(hdr);
ret = MIN(max_len, ret);
memcpy(&copy_to[sizeof(hdr)], info, ret);
if (ret > max_len) {
errno = EMSGSIZE;
return -1;
}
memcpy(&copy_to[sizeof(hdr)], info, info_len);
} else {
ret = 0;
}