uint8_t *pin = NULL;
cborFindResult = cbor_value_dup_byte_string(&pconfMap, &pin, &len, NULL);
VERIFY_CBOR_SUCCESS(TAG, cborFindResult, "Failed to get value");
- memcpy(pconf->pin.val, pin, len);
+ memcpy(pconf->pin.val, pin, len > 8 ? 8 : len);
OICFree(pin);
}