Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 033c4f36 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Automerger Merge Worker
Browse files

Merge "Fix potential OOB write in libbluetooth" into rvc-dev am: b51042ce 

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/bt/+/12778870

Change-Id: Id178c883b9fb06614e52aa251e00406867981042
parents 924a752f b51042ce

system/stack/avrc/avrc_pars_tg.cc

+7 −0
Original line number Diff line number Diff line
@@ -306,6 +306,13 @@ static tAVRC_STS avrc_pars_vendor_cmd(tAVRC_MSG_VENDOR* p_msg, 
        return AVRC_STS_INTERNAL_ERR;

      else {

        BE_STREAM_TO_UINT8(p_result->reg_notif.event_id, p);

        if (!AVRC_IS_VALID_EVENT_ID(p_result->reg_notif.event_id)) {

          android_errorWriteLog(0x534e4554, "168802990");

          AVRC_TRACE_ERROR("%s: Invalid event id: %d", __func__,

                           p_result->reg_notif.event_id);

          return AVRC_STS_BAD_PARAM;

        }



        BE_STREAM_TO_UINT32(p_result->reg_notif.param, p);

      }

      break;