Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 19037d9b authored by Hui Peng's avatar Hui Peng
Browse files

Fix a few OOB issues in btm_ble_update_inq_result 

Bug: 264624283
Test: manual
Merged-In: Ie102647aab9776c8c9b9393812f6ca25dbf71d02
Change-Id: Ie102647aab9776c8c9b9393812f6ca25dbf71d02
parent 9a5ea1dc

system/stack/btm/btm_ble_gap.cc

+2 −1
Original line number Diff line number Diff line
@@ -2448,7 +2448,8 @@ void btm_ble_update_inq_result(tINQ_DB_ENT* p_i, uint8_t addr_type, 
                data.size() - (p_service_data - data.data()) - service_data_len,

                BTM_BLE_AD_TYPE_SERVICE_DATA_TYPE, &service_data_len))) {

      uint16_t uuid;

      STREAM_TO_UINT16(uuid, p_service_data);

      const uint8_t* p_uuid = p_service_data;

      STREAM_TO_UINT16(uuid, p_uuid);



      if (uuid == 0x184E /* Audio Stream Control service */ ||

          uuid == 0x184F /* Broadcast Audio Scan service */ ||