mirror of
https://github.com/espressif/esp-idf.git
synced 2026-04-29 03:44:59 +00:00
9c6f6c7470
Add checks to validate client_verify_data pointer and length before processing in handle_session_command1. Prevents NULL pointer dereference when client omits verifier data in Session_Command1, which could cause device crash during provisioning (remote DoS attack).