Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3d8c1d71 authored by Pavlin Radoslavov's avatar Pavlin Radoslavov Committed by android-build-merger
Browse files

Merge "Add missing extension length check while parsing BNEP control packets"... 

Merge "Add missing extension length check while parsing BNEP control packets" into nyc-dev am: 5b71af8a am: fd43d9f3 am: f028eab1
am: c119b4bb

Change-Id: I05f7864e4eb435e5d0cc7f5275fd4f34deb724b8
parents 6d682499 c119b4bb

system/stack/bnep/bnep_utils.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -886,7 +886,7 @@ UINT8 *bnep_process_control_packet (tBNEP_CONN *p_bcb, UINT8 *p, UINT16 *rem_len 
        BNEP_TRACE_ERROR("%s: BNEP - bad ctl pkt type: %d", __func__,

        BNEP_TRACE_ERROR("%s: BNEP - bad ctl pkt type: %d", __func__,

                         control_type);

                         control_type);

        bnep_send_command_not_understood (p_bcb, control_type);

        bnep_send_command_not_understood (p_bcb, control_type);

        if (is_ext)

        if (is_ext && (ext_len > 0))

        {

        {

            if (*rem_len < (ext_len - 1)) {

            if (*rem_len < (ext_len - 1)) {

                goto bad_packet_length;

                goto bad_packet_length;