From fe1d292f241bc7a024a9c20627f6300f3ebc433b Mon Sep 17 00:00:00 2001
From: Uros Majstorovic <majstor@majstor.org>
Date: Sat, 27 Feb 2021 01:54:48 +0100
Subject: wifi scan verifies length of ssid

---
 fw/esp32/components/eos/wifi.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'fw/esp32')

diff --git a/fw/esp32/components/eos/wifi.c b/fw/esp32/components/eos/wifi.c
index a20e076..7fae635 100755
--- a/fw/esp32/components/eos/wifi.c
+++ b/fw/esp32/components/eos/wifi.c
@@ -73,7 +73,8 @@ static void wifi_event_handler(void *arg, esp_event_base_t event_base, int32_t e
                 rbuf[0] = EOS_WIFI_MTYPE_SCAN;
                 p = rbuf + 1;
                 for (i=0; i<scan_n; i++) {
-                    len = strlen((char *)scan_r[i].ssid);
+                    len = strnlen((char *)scan_r[i].ssid, 33);
+                    if (len > 32) continue;
                     if (p - rbuf + len + 1 > EOS_NET_SIZE_BUF) break;
                     strcpy((char *)p, (char *)scan_r[i].ssid);
                     p += len + 1;
-- 
cgit v1.2.3