Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 12576284 authored by Hui Peng's avatar Hui Peng
Browse files

Fix an OOB bug in btm_ble_clear_resolving_list_complete 

Regression test: I3d1523b6dbadf75f682663504a0c932624c33d08

Bug: 255304475
Test: atest net_test_stack_btm
Tag: #security
Ignore-AOSP-First: security
Merged-In: I3a8158a5db7e59acdaaa47e2327f6bdf492e47e7
Change-Id: I3a8158a5db7e59acdaaa47e2327f6bdf492e47e7
parent 27200cfe

system/stack/btm/btm_ble_privacy.cc

+6 −0
Original line number Diff line number Diff line
@@ -224,6 +224,12 @@ static bool clear_resolving_list_bit(void* data, void* context) { 
 ******************************************************************************/

void btm_ble_clear_resolving_list_complete(uint8_t* p, uint16_t evt_len) {

  uint8_t status = 0;



  if (evt_len < 1) {

    BTM_TRACE_ERROR("malformatted event packet: containing zero bytes");

    return;

  }



  STREAM_TO_UINT8(status, p);



  BTM_TRACE_DEBUG("%s status=%d", __func__, status);