From 6d9da043da117e04c07571d45a7888317bd61930 Mon Sep 17 00:00:00 2001 From: airskywater <96818686+airskywater@users.noreply.github.com> Date: Sun, 9 Oct 2022 18:29:13 +0800 Subject: [PATCH] Avoid the following repeated computing or replay attack. --- hw/application_fpga/fw/mta1_mkdf/main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hw/application_fpga/fw/mta1_mkdf/main.c b/hw/application_fpga/fw/mta1_mkdf/main.c index 630f3b2..2fb4393 100644 --- a/hw/application_fpga/fw/mta1_mkdf/main.c +++ b/hw/application_fpga/fw/mta1_mkdf/main.c @@ -175,7 +175,7 @@ int main() case FW_CMD_LOAD_APP_DATA: puts("request: load-app-data\n"); - if (hdr.len != 128 || *app_size == 0) { + if (hdr.len != 128 || *app_size == 0 || left == 0) { // Bad length of this command or bad app size - // they need to call FW_CMD_LOAD_APP_SIZE first rsp[0] = STATUS_BAD;