Merge "Fix OOB of L2CAP_CMD_CREDIT_BASED_CONN_RES" (127a13d7) · Commits · e / os / android_packages_modules_Bluetooth

system/stack/l2cap/l2c_ble.cc

+1 −1

Original line number	Diff line number	Diff line
		@@ -628,7 +628,7 @@ void l2cble_process_sig_cmd(tL2C_LCB* p_lcb, uint8_t* p, uint16_t pkt_len) {
		break;
		}
		case L2CAP_CMD_CREDIT_BASED_CONN_RES:
		if (p + 2 > p_pkt_end) {
		if (p + 8 > p_pkt_end) {
		LOG(ERROR) << "invalid L2CAP_CMD_CREDIT_BASED_CONN_RES len";
		return;
		}