This is an automated email from the ASF dual-hosted git repository.
xiaoxiang781216 pushed a commit to branch releases/13.0
in repository https://gitbox.apache.org/repos/asf/nuttx.git
The following commit(s) were added to refs/heads/releases/13.0 by this push:
new a2b8d15041b arch/arm: nrf91: bound modem version parsing
a2b8d15041b is described below
commit a2b8d15041bc72072d6ecb10d72aa4c4923ecf0f
Author: Old-Ding <[email protected]>
AuthorDate: Mon Jul 6 07:34:56 2026 +0800
arch/arm: nrf91: bound modem version parsing
Limit modem version tokens parsed from AT command responses to the LTE
version field sizes. Also require both HWVERSION fields before copying them so
a partial parse does not read an uninitialized temporary buffer.
Signed-off-by: Old-Ding <[email protected]>
---
arch/arm/src/nrf91/nrf91_modem_sock.c | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/arch/arm/src/nrf91/nrf91_modem_sock.c
b/arch/arm/src/nrf91/nrf91_modem_sock.c
index c85557e32d2..6bbb2c9c3e0 100644
--- a/arch/arm/src/nrf91/nrf91_modem_sock.c
+++ b/arch/arm/src/nrf91/nrf91_modem_sock.c
@@ -451,20 +451,20 @@ static int nrf91_usrsock_event_callback(int16_t usockid,
uint16_t events)
static int nrf91_modem_getver(lte_version_t *version)
{
- char buffer1[16];
- char buffer2[16];
+ char buffer1[LTE_VER_FIRMWARE_LEN];
+ char buffer2[LTE_VER_NP_PACKAGE_LEN];
int ret = OK;
memset(version, 0, sizeof(*version));
- ret = nrf_modem_at_scanf("AT%HWVERSION", "%%HWVERSION: %s %s",
+ ret = nrf_modem_at_scanf("AT%HWVERSION", "%%HWVERSION: %31s %31s",
buffer1, buffer2);
- if (ret > 0)
+ if (ret == 2)
{
strncpy(version->bb_product, buffer1, LTE_VER_BB_PRODUCT_LEN);
strncpy(version->np_package, buffer2, LTE_VER_NP_PACKAGE_LEN);
}
- ret = nrf_modem_at_scanf("AT+CGMR", "%s", buffer1);
+ ret = nrf_modem_at_scanf("AT+CGMR", "%31s", buffer1);
if (ret > 0)
{
strncpy(version->fw_version, buffer1, LTE_VER_FIRMWARE_LEN);
