From 56a90642d368409f82de94490ef577da35f17a13 Mon Sep 17 00:00:00 2001 From: Jon Shallow Date: Thu, 4 Sep 2025 20:05:06 +0100 Subject: [PATCH] coap_session.c Fix CID update check --- src/coap_session.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/coap_session.c b/src/coap_session.c index 0ff6a527..a87ac242 100644 --- a/src/coap_session.c +++ b/src/coap_session.c @@ -1338,9 +1338,11 @@ coap_endpoint_get_session(coap_endpoint_t *endpoint, SESSIONS_ITER(endpoint->sessions, session, rtmp) { if (session->client_cid) { if ((session->is_dtls13 && (payload[OFF_CONTENT_TYPE] & 0x30) == 0x30 && + length > (OFF_CID_DTLS13 + session->client_cid->length) && memcmp(session->client_cid->s, &payload[OFF_CID_DTLS13], session->client_cid->length) == 0) || (!session->is_dtls13 && payload[OFF_CONTENT_TYPE] == DTLS_CT_CID && + length > (OFF_CID + session->client_cid->length) && memcmp(session->client_cid->s, &payload[OFF_CID], session->client_cid->length) == 0)) { /* Updating IP address */