When restoring session information from blob data, only consider the
embedded username attribute if it is a string value.
Other types may cause invalid memory accesses when attempting to strcmp()
the attribute value.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
blobmsg_for_each_attr(data, tb[RPC_DUMP_DATA], rem) {
rpc_session_set(ses, data);
+ if (blobmsg_type(data) != BLOBMSG_TYPE_STRING)
+ continue;
+
if (!strcmp(blobmsg_name(data), "username"))
user = blobmsg_get_string(data);
}