aboutsummaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorPau Espin Pedrol <pespin@sysmocom.de>2019-12-20 16:36:27 +0100
committerPau Espin Pedrol <pespin@sysmocom.de>2019-12-23 18:27:47 +0100
commite1766f1b7dbf90785eda3e75e6d9b6109a58fa3e (patch)
treeeb54a3673e949e57f4626c0fc2dcd81760865d65 /src
parent7544f5a45badd1111464b0aae8f389b692e8afd8 (diff)
l1sap: is_fille_frame(): verify len of data compared
Diffstat (limited to 'src')
-rw-r--r--src/common/l1sap.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/common/l1sap.c b/src/common/l1sap.c
index 213099d5..b6e21faf 100644
--- a/src/common/l1sap.c
+++ b/src/common/l1sap.c
@@ -458,6 +458,9 @@ static const uint8_t paging_fill[GSM_MACBLOCK_LEN] = {
static bool is_fill_frame(uint8_t chan_type, const uint8_t *data, unsigned int len)
{
+ if (len != GSM_MACBLOCK_LEN)
+ return false;
+
switch (chan_type) {
case GSMTAP_CHANNEL_AGCH:
if (!memcmp(data, fill_frame, GSM_MACBLOCK_LEN))