Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(ble_mesh): reject invalid chunk size

Browse Source 
(cherry picked from commit 35cd10fbdf)

Co-authored-by: luoxu <luoxu@espressif.com>
This commit is contained in:
Luo Xu
2026-07-06 17:44:37 +08:00
parent 5a57501543
commit d5555a086c
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
components/bt/esp_ble_mesh/v1.1/mbt/blob_cli.c
View File

@@ -1398,6 +1398,10 @@ static int handle_block_status(const struct bt_mesh_model *mod, struct bt_mesh_m
size_t len;
int idx;
if (!cli->xfer) {
return -EINVAL;
}
target = target_get(cli, ctx->addr);
if (!target) {
return -ENOENT;
@@ -1408,8 +1412,8 @@ static int handle_block_status(const struct bt_mesh_model *mod, struct bt_mesh_m
status.missing = status_and_format >> 6;
status.block.number = net_buf_simple_pull_le16(buf);
chunk_size = net_buf_simple_pull_le16(buf);
if (chunk_size == 0) {
BT_ERR("Invalid chunk_size: 0");
if (chunk_size == 0 || chunk_size != cli->xfer->chunk_size) {
BT_ERR("Invalid chunk_size: %d,%d", chunk_size, cli->xfer->chunk_size);
return -EINVAL;
}
status.block.chunk_count =