Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 24dc32e1 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "DO NOT MERGE Fix OOB read in avrc_ctrl_pars_vendor_rsp" into nyc-dev

parents cd5d1341 e8f2311e

system/stack/avrc/avrc_pars_ct.c

+5 −0
Original line number Diff line number Diff line
@@ -251,6 +251,11 @@ static tAVRC_STS avrc_ctrl_pars_vendor_rsp( 
            break;

        }

        BE_STREAM_TO_UINT8(p_result->list_app_values.num_val, p);

        if (p_result->list_app_values.num_val > AVRC_MAX_APP_ATTR_SIZE) {

            android_errorWriteLog(0x534e4554, "78526423");

            p_result->list_app_values.num_val = AVRC_MAX_APP_ATTR_SIZE;

        }



        AVRC_TRACE_DEBUG("%s value count = %d ", __func__, p_result->list_app_values.num_val);

        for(int xx = 0; xx < p_result->list_app_values.num_val; xx++)

        {