arendst / Tasmota

Alternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation at
https://tasmota.github.io/docs
GNU General Public License v3.0
21.7k stars 4.72k forks source link

Fixed incorrect output size clamping #21568

Closed mbezuidenhout closed 3 weeks ago

mbezuidenhout commented 4 weeks ago

Description:

Fixed incorrect output size clamping. Code was reading past the end of const char* hex

out_len is the maximum size of the output and thus the value of bytes_out cannot be larger than out_len.

Checklist:

s-hadinger commented 4 weeks ago

@arendst This looks ok to me.