amr: osmo_amr_bwe_to_oa(): validate input data is long enough

Change-Id: I2d11ce71c29ae046c2feab1e59045d97dc3e5099
This commit is contained in:
Pau Espin 2022-12-21 18:20:32 +01:00
parent 16d9d5dba8
commit c0691ad3fd
1 changed files with 2 additions and 0 deletions

View File

@ -221,6 +221,8 @@ int osmo_amr_bwe_to_oa(uint8_t *payload, unsigned int payload_len,
ft = (bwe_hdr->ft_hi << 1) | bwe_hdr->ft_lo;
if (!osmo_amr_ft_valid(ft))
return -1;
if (OSMO_BYTES_FOR_BITS(AMR_HDR_BWE_LEN_BITS + osmo_amr_bits(ft)) > payload_len)
return -1;
memset(buf, 0, sizeof(buf));
oa_hdr = (struct amr_hdr *)buf;