F-9179 - Reject a NULL vendor payload with a nonzero size

2026-09-10 11:16:55 -07:00 · 2026-09-10 11:16:55 -07:00 · e86c7573d0
parent 38850cee43
commit e86c7573d0
1 changed files with 3 additions and 0 deletions
--- a/src/spdm/spdm_tcg.c
+++ b/src/spdm/spdm_tcg.c
@ -204,6 +204,9 @@ int wolfSPDM_BuildVendorDefined(
    if (vdCode == NULL || outBuf == NULL) {
        return WOLFSPDM_E_INVALID_ARG;
    }
+    if (payload == NULL && payloadSz != 0) {
+        return WOLFSPDM_E_INVALID_ARG;
+    }

    /* SPDM VENDOR_DEFINED_REQUEST format:
     * SPDMVersion(1) + reqRspCode(1) + param1(1) + param2(1) +