smsutil: check status report fits in buffer

Fixes CVE-2023-4232

(cherry picked from commit 2ff2da7ac374a790f8b2a0216bcb4e3126498225)

Origin: upstream, https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=2ff2da7ac374a790f8b2a0216bcb4e3126498225
This commit is contained in:
Sicelo A. Mhlongo
2024-12-04 10:18:52 +02:00
committed by kuailexs
parent 90106c2c53
commit 3aa6abb8a2

View File

@@ -1092,6 +1092,9 @@ static gboolean decode_status_report(const unsigned char *pdu, int len,
if ((len - offset) < expected)
return FALSE;
if (expected > (int)sizeof(out->status_report.ud))
return FALSE;
memcpy(out->status_report.ud, pdu + offset, expected);
}