michaelh/zephyr
1
0
Fork 0
Code Releases Activity

Bluetooth: Mesh: Check SegN when receiving Transaction Start PDU

Browse source 
When receiving Transaction Start PDU, assure that number of segments
needed to send a Provisioning PDU with TotalLength size is equal to SegN
value provided in the Transaction Start PDU.

Signed-off-by: Pavel Vasilyev <pavel.vasilyev@nordicsemi.no>
This commit is contained in:
Pavel Vasilyev 2022-04-26 11:20:12 +02:00 • committed by Johan Hedberg
commit a63c515679
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
subsys/bluetooth/mesh/pb_adv.c
View file

@ -149,7 +149,7 @@ static struct bt_mesh_send_cb buf_sent_cb = {
.end = buf_sent, .end = buf_sent,
}; };
static uint8_t last_seg(uint8_t len) static uint8_t last_seg(uint16_t len)
{ {
if (len <= START_PAYLOAD_MAX) { if (len <= START_PAYLOAD_MAX) {
return 0; return 0;
@ -482,6 +482,13 @@ static void gen_prov_start(struct prov_rx *rx, struct net_buf_simple *buf)
return; return;
} }
if (START_LAST_SEG(rx->gpc) != last_seg(link.rx.buf->len)) {
BT_ERR("Invalid SegN (%u, calculated %u)", START_LAST_SEG(rx->gpc),
last_seg(link.rx.buf->len));
prov_failed(PROV_ERR_NVAL_FMT);
return;
}
prov_clear_tx(); prov_clear_tx();
link.rx.last_seg = START_LAST_SEG(rx->gpc); link.rx.last_seg = START_LAST_SEG(rx->gpc);