Add sanitize check.

Only pages 0 and 1 are allowed for reading.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos 2024-10-27 01:24:36 +02:00
parent eaf3d051e3
commit cbd9a5d296
No known key found for this signature in database
GPG key ID: C0095B7870A4CCD3

View file

@ -261,6 +261,9 @@ int cmd_extras() {
}
uint16_t row = (apdu.data[0] << 8) | apdu.data[1];
if (apdu.nc == 2) {
if (row > 0xbf) {
return SW_WRONG_DATA();
}
memcpy(res_APDU, otp_buffer(row), apdu.ne);
res_APDU_size = apdu.ne;
}