libspdm icon indicating copy to clipboard operation
libspdm copied to clipboard

Need add transport length check libspdm_mctp_encode_message()

Open jyao1 opened this issue 3 years ago • 0 comments

In libspdm_pci_doe_encode_message(), there is length check for *transport_message_size. But the code is missing in libspdm_mctp_encode_message().

    LIBSPDM_ASSERT(*transport_message_size >=
                   aligned_message_size + sizeof(pci_doe_data_object_header_t));
    if (*transport_message_size <
        aligned_message_size + sizeof(pci_doe_data_object_header_t)) {
        *transport_message_size = aligned_message_size +
                                  sizeof(pci_doe_data_object_header_t);
        return LIBSPDM_STATUS_BUFFER_TOO_SMALL;
    }

jyao1 avatar Mar 28 '22 02:03 jyao1