check version_count before using it.

fix #171 Signed-off-by: Yang, Longlong <[email protected]>
intel · Dec 12, 2023 · 8afd6ce · 8afd6ce
1 parent 45e459e
commit 8afd6ce
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/spdmlib/src/common/opaque.rs b/spdmlib/src/common/opaque.rs
@@ -249,6 +249,9 @@ impl SpdmCodec for SecuredMessageVersionList {
     }
     fn spdm_read(context: &mut SpdmContext, r: &mut Reader) -> Option<SecuredMessageVersionList> {
         let version_count = u8::read(r)?;
+        if version_count as usize > MAX_SECURE_SPDM_VERSION_COUNT {
+            return None;
+        }
         let mut versions_list = [SecuredMessageVersion::default(); MAX_SECURE_SPDM_VERSION_COUNT];
         for d in versions_list.iter_mut().take(version_count as usize) {
             *d = SecuredMessageVersion::spdm_read(context, r)?;