Miss checking whether spdm_response_size < sizeof(spdm_csr_response_t) + spdm_response-> csr_length before libspdm_copy_mem.

[Zhiqiang520]

Miss checking whether spdm_response_size < sizeof(spdm_csr_response_t) + spdm_response-> csr_length before libspdm_copy_mem.

I think we should check whether spdm_response_size < sizeof(spdm_csr_response_t) + spdm_response-> csr_length before libspdm_copy_mem at the line 212.

libspdm/library/spdm_requester_lib/libspdm_req_get_csr.c

Lines 206 to 212 in 4c92ff5

	if (*csr_len < spdm_response->csr_length) {
	*csr_len = spdm_response->csr_length;
	status = LIBSPDM_STATUS_BUFFER_TOO_SMALL;
	goto receive_done;
	}
	libspdm_copy_mem(csr, *csr_len, spdm_response + 1, spdm_response->csr_length);