Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2864278e authored by Chen Chen's avatar Chen Chen
Browse files

Fuzz: Fix overflow in SDP_addAttribute 

Bug: 209062898
Bug: 192206329
Test: build
Change-Id: I76bc98211bcb4de8a279cda18e6ba26da831b305
parent c7041732

system/stack/sdp/sdp_db.cc

+1 −2
Original line number Diff line number Diff line
@@ -435,8 +435,7 @@ bool SDP_AddAttribute(uint32_t handle, uint16_t attr_id, uint8_t attr_type, 
              attr_len, SDP_MAX_PAD_LEN - p_rec->free_pad_ptr);



          attr_len = SDP_MAX_PAD_LEN - p_rec->free_pad_ptr;

          p_val[SDP_MAX_PAD_LEN - p_rec->free_pad_ptr] = '\0';

          p_val[SDP_MAX_PAD_LEN - p_rec->free_pad_ptr + 1] = '\0';

          p_val[SDP_MAX_PAD_LEN - p_rec->free_pad_ptr - 1] = '\0';

        } else

          attr_len = 0;

      }