Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3e4103e3 authored by Myles Watson's avatar Myles Watson Committed by android-build-merger
Browse files

BNEP: Check received frame type am: 74904e19 

am: aafa1f90

Change-Id: Ia4d4f3dbaab1922f1f47958b216acfc63cd039dd
parents 480c1c6d aafa1f90

system/stack/bnep/bnep_main.c

+6 −0
Original line number Original line Diff line number Diff line
@@ -486,6 +486,12 @@ static void bnep_data_ind (UINT16 l2cap_cid, BT_HDR *p_buf) 
    type = *p++;

    type = *p++;

    extension_present = type >> 7;

    extension_present = type >> 7;

    type &= 0x7f;

    type &= 0x7f;

    if (type >= sizeof(bnep_frame_hdr_sizes) / sizeof(bnep_frame_hdr_sizes[0])) {

        BNEP_TRACE_EVENT("BNEP - rcvd frame, bad type: 0x%02x", type);

        android_errorWriteLog(0x534e4554, "68818034");

        GKI_freebuf (p_buf);

        return;

    }

    if ((rem_len <= bnep_frame_hdr_sizes[type]) || (rem_len > BNEP_MTU_SIZE))

    if ((rem_len <= bnep_frame_hdr_sizes[type]) || (rem_len > BNEP_MTU_SIZE))

    {

    {

        BNEP_TRACE_EVENT ("BNEP - rcvd frame, bad len: %d  type: 0x%02x", p_buf->len, type);

        BNEP_TRACE_EVENT ("BNEP - rcvd frame, bad len: %d  type: 0x%02x", p_buf->len, type);