Merge pull request mjg59#46 from Danielhiversen/patch-10

Matthew Garrett · web-flow · commit a4465a751583 · 2016-12-28T08:03:02.000-06:00
validate the authorization
diff --git a/broadlink/__init__.py b/broadlink/__init__.py
@@ -179,8 +179,16 @@ def auth(self):
     aes = AES.new(bytes(self.key), AES.MODE_CBC, bytes(self.iv))
     payload = aes.decrypt(bytes(enc_payload))
 
+    if not payload:
+     return False
+
+    key = payload[0x04:0x14]
+    if len(key) % 16 != 0:
+     return False
+
     self.id = payload[0x00:0x04]
-    self.key = payload[0x04:0x14]
+    self.key = key
+    return True
 
   def get_type(self):
     return self.type
