Hi, thanks for the feedback. While blob_pad_len does cover the size of struct blob_attr it will always read attr->id_len which might be out of bounds already. Thus we need to check that rem >= sizeof(struct blob_attr) before.
Tobias _______________________________________________ openwrt-devel mailing list [email protected] https://lists.openwrt.org/mailman/listinfo/openwrt-devel
