Skip to content

fix(radio): check for negative and overlong credential lengths #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
deadprogram merged 1 commit into from
Jun 12, 2026
Merged

fix(radio): check for negative and overlong credential lengths #49

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions radio.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -399,11 +399,12 @@ esp_err_t espradio_set_country_eu_manual(void) {

esp_err_t espradio_sta_set_config(const char *ssid, int ssid_len,
const char *pwd, int pwd_len) {
if (ssid_len < 0 || pwd_len < 0 || ssid_len > 32 || pwd_len > 64) {
return ESP_ERR_INVALID_ARG;
}
wifi_config_t cfg;
memset(&cfg, 0, sizeof(cfg));
if (ssid_len > 32) ssid_len = 32;
memcpy(cfg.sta.ssid, ssid, ssid_len);
if (pwd_len > 64) pwd_len = 64;
memcpy(cfg.sta.password, pwd, pwd_len);
if (pwd_len > 0)
cfg.sta.threshold.authmode = WIFI_AUTH_WPA2_PSK;
Expand All @@ -413,12 +414,13 @@ esp_err_t espradio_sta_set_config(const char *ssid, int ssid_len,
esp_err_t espradio_ap_set_config(const char *ssid, int ssid_len,
const char *pwd, int pwd_len,
uint8_t channel, int auth_open) {
if (ssid_len < 0 || pwd_len < 0 || ssid_len > 32 || pwd_len > 64) {
return ESP_ERR_INVALID_ARG;
}
wifi_config_t cfg;
memset(&cfg, 0, sizeof(cfg));
if (ssid_len > 32) ssid_len = 32;
memcpy(cfg.ap.ssid, ssid, ssid_len);
cfg.ap.ssid_len = (uint8_t)ssid_len;
if (pwd_len > 64) pwd_len = 64;
memcpy(cfg.ap.password, pwd, pwd_len);
cfg.ap.channel = channel ? channel : 1;
cfg.ap.max_connection = 4;
Expand Down
Loading