Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 03:00:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(ble_mesh): reject invalid chunk size

Browse Source
This commit is contained in:
luoxu
2026-07-03 12:14:21 +08:00
parent 52cfff707f
commit 35cd10fbdf
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/bt/esp_ble_mesh/v1.1/mbt/blob_cli.c
+6 -2
View File
@@ -1398,6 +1398,10 @@ static int handle_block_status(const struct bt_mesh_model *mod, struct bt_mesh_m
size_t len; size_t len;
int idx; int idx;
if (!cli->xfer) {
return -EINVAL;
}
target = target_get(cli, ctx->addr); target = target_get(cli, ctx->addr);
if (!target) { if (!target) {
return -ENOENT; return -ENOENT;
@@ -1408,8 +1412,8 @@ static int handle_block_status(const struct bt_mesh_model *mod, struct bt_mesh_m
status.missing = status_and_format >> 6; status.missing = status_and_format >> 6;
status.block.number = net_buf_simple_pull_le16(buf); status.block.number = net_buf_simple_pull_le16(buf);
chunk_size = net_buf_simple_pull_le16(buf); chunk_size = net_buf_simple_pull_le16(buf);
if (chunk_size == 0) { if (chunk_size == 0 || chunk_size != cli->xfer->chunk_size) {
BT_ERR("Invalid chunk_size: 0"); BT_ERR("Invalid chunk_size: %d,%d", chunk_size, cli->xfer->chunk_size);
return -EINVAL; return -EINVAL;
} }
status.block.chunk_count = status.block.chunk_count =