Extra check for tail_size length (#23047)

3 years ago · b2a018643f
parent c6f62ebc4f
commit b2a018643f
1 changed files with 1 additions and 0 deletions
--- a/selfdrive/boardd/panda.cc
+++ b/selfdrive/boardd/panda.cc
@ -478,6 +478,7 @@ bool Panda::unpack_can_buffer(uint8_t *data, int size, std::vector<can_frame> &o
      } else {
        // Keep partial CAN packet until next USB packet
        tail_size = (chunk_len - pos);
+        assert(tail_size <= CANPACKET_MAX_SIZE);
        memcpy(tail, &chunk[pos], tail_size);
        break;
      }