rottenwheel/monero
1
0
Fork 0
mirror of https://codeberg.org/anoncontributorxmr/monero.git synced 2024-11-22 23:42:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix incorrect lenght of command INS_PREFIX_HASH

Browse source 
buffer_send[4] (LC) is an unsigned char, len should not
exceed 254 (255 - 1 for the option).
This commit is contained in:
François Colas 2020-05-27 14:57:05 +02:00
parent 77a008f714
commit ec46069248
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/device/device_ledger.cpp
View file

@ -1468,8 +1468,8 @@ namespace hw {
offset = set_command_header(INS_PREFIX_HASH,2,cnt); offset = set_command_header(INS_PREFIX_HASH,2,cnt);
len = pref_length - pref_offset; len = pref_length - pref_offset;
//options //options
if (len > (BUFFER_SEND_SIZE-7)) { if (len > (BUFFER_SEND_SIZE-offset-3)) {
len = BUFFER_SEND_SIZE-7; len = BUFFER_SEND_SIZE-offset-3;
this->buffer_send[offset] = 0x80; this->buffer_send[offset] = 0x80;
} else { } else {
this->buffer_send[offset] = 0x00; this->buffer_send[offset] = 0x00;