check total_elements before using it.

fix #172 Signed-off-by: Yang, Longlong <[email protected]>
intel · Dec 12, 2023 · 72c6977 · 72c6977
1 parent 8afd6ce
commit 72c6977
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/spdmlib/src/common/opaque.rs b/spdmlib/src/common/opaque.rs
@@ -509,6 +509,11 @@ impl SpdmCodec for SecuredMessageDMTFVersionSelection {
     ) -> Option<SecuredMessageDMTFVersionSelection> {
         let secured_message_general_opaque_data_header =
             SecuredMessageGeneralOpaqueDataHeader::spdm_read(context, r)?;
+        if secured_message_general_opaque_data_header.total_elements as usize
+            > MAX_OPAQUE_LIST_ELEMENTS_COUNT
+        {
+            return None;
+        }
         let mut opaque_element_dmtf_version_selection_list =
             [OpaqueElementDMTFVersionSelection::default(); MAX_OPAQUE_LIST_ELEMENTS_COUNT];
         for d in opaque_element_dmtf_version_selection_list