esp8266/modnetwork.c: esp_connect() avoid potential buffer overflows

puuu · puuu · commit 6c1b13454935 · 2017-05-15T11:14:21.000+09:00
diff --git a/esp8266/modnetwork.c b/esp8266/modnetwork.c
@@ -102,9 +102,11 @@ STATIC mp_obj_t esp_connect(mp_uint_t n_args, const mp_obj_t *args) {
 
     if (n_args > 1) {
         p = mp_obj_str_get_data(args[1], &len);
+        len = MIN(len, sizeof(config.ssid));
         memcpy(config.ssid, p, len);
         if (n_args > 2) {
             p = mp_obj_str_get_data(args[2], &len);
+            len = MIN(len, sizeof(config.password));
             memcpy(config.password, p, len);
         }
 
