alt1250: Fix buffer overrun

SPRESENSE · Mar 7, 2023 · 800e9c9 · 800e9c9
2 parents ce8b377 + f1a28e4
commit 800e9c9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/drivers/modem/alt1250/altcom_hdlr_sms.c b/drivers/modem/alt1250/altcom_hdlr_sms.c
@@ -83,7 +83,8 @@ int32_t altcom_smssend_pkt_compose(FAR void **arg, size_t arglen,
 
   if ((msg->header.destaddrlen % 2) || (msg->header.datalen % 2) ||
       (msg->header.destaddrlen > (SMS_MAX_ADDRLEN * 2)) ||
-      (msg->header.datalen > (SMS_MAX_DATALEN * 2)))
+      (msg->header.datalen > (SMS_MAX_DATALEN * 2)) ||
+      (scaddr->addrlen % 2) || (scaddr->addrlen > (SMS_MAX_ADDRLEN * 2)))
     {
       /* destaddrlen and datalen must be even numbers */