net: rpmsgdrv.c: prevent potential danger

Provide support for NET_RPMSG_TRANSFER only: "It is recommended to drop all messages with commands other than NET_RPMSG_TRANSFER in function net_rpmsg_drv_ept_cb() of the flight controller." Signed-off-by: Eero Nurkkala <[email protected]>
tiiuae · Dec 5, 2023 · b1d7e41 · b1d7e41
1 parent 19b862a
commit b1d7e41
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/drivers/net/rpmsgdrv.c b/drivers/net/rpmsgdrv.c
@@ -594,6 +594,13 @@ static int net_rpmsg_drv_ept_cb(FAR struct rpmsg_endpoint *ept, void *data,
   FAR struct net_rpmsg_header_s *header = data;
   uint32_t command = header->command;
 
+#ifdef CONFIG_MPFS_IHC_CLIENT
+  if (command != NET_RPMSG_TRANSFER)
+    {
+      return -EINVAL;
+    }
+#endif
+
   if (command < sizeof(g_net_rpmsg_drv_handler) /
                 sizeof(g_net_rpmsg_drv_handler[0]))
     {