Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 39cd5ed7 authored by Andre Eisenbach's avatar Andre Eisenbach Committed by android-build-merger
Browse files

SDP: Bounds check 'id' parameter for free_sdp_slot() am: 8e93620b 

am: 0c9184d7

Change-Id: I6939a5c1ad822a09177705032a7ba9ef4da3e4d0
parents 197d1905 0c9184d7

system/btif/src/btif_sdp_server.cc

+2 −1
Original line number Diff line number Diff line
@@ -214,7 +214,8 @@ static int alloc_sdp_slot(bluetooth_sdp_record* in_record) { 
static int free_sdp_slot(int id) {

  int handle = -1;

  bluetooth_sdp_record* record = NULL;

  if (id >= MAX_SDP_SLOTS) {

  if (id < 0 || id >= MAX_SDP_SLOTS) {

    android_errorWriteLog(0x534e4554, "37502513");

    APPL_TRACE_ERROR("%s() failed - id %d is invalid", __func__, id);

    return handle;

  }