add check for valid sender to key exchange

pa-pa · Jan 23, 2024 · 4636714 · 4636714
1 parent 52ed47c
commit 4636714
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/MultiChannelDevice.h b/MultiChannelDevice.h
@@ -504,6 +504,10 @@ class ChannelDevice : public Device<HalType,List0Type> {
 #endif
 #ifdef USE_AES
  else if (mtype == AS_MESSAGE_KEY_EXCHANGE ) {
+ if( isPaired==true && msgIsFromMaster==false ) {
+ //DPRINTLN(F("-> message for us, but from wrong master address."));
+ return false;
+ }
  if( validSignature(msg) == true ) {
  if( this->keystore().exchange(msg.aesExchange())==true ) answer = REPLAY_ACK;
  else answer = REPLAY_NACK;