Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2989d7ad authored by Hui Peng's avatar Hui Peng Committed by Android (Google) Code Review
Browse files

Merge "Fix an OOB bug in on_iso_link_quality_read"

parents f0982810 6ee00faa

system/stack/btm/btm_iso_impl.h

+7 −0
Original line number Diff line number Diff line
@@ -358,6 +358,13 @@ struct iso_impl { 
    uint32_t rxUnreceivedPackets;

    uint32_t duplicatePackets;



    // 1 + 2 + 4 * 7

#define ISO_LINK_QUALITY_SIZE 31

    if (len < ISO_LINK_QUALITY_SIZE) {

      LOG(ERROR) << "Malformated link quality format, len=" << len;

      return;

    }



    STREAM_TO_UINT8(status, stream);

    if (status != HCI_SUCCESS) {

      LOG(ERROR) << "Failed to Read ISO Link Quality, status: "