Fix an OOB bug in register_notification_rsp

Bug: 245916076
Test: manual
Ignore-AOSP-First: security
Change-Id: I901d973a736678d7f3cc816ddf0cbbcbbd1fe93f
(cherry picked from commit daa3efc5)
Merged-In: I901d973a736678d7f3cc816ddf0cbbcbbd1fe93f

parent f5e706e9

system/btif/src/btif_rc.cc

+5 −0

Original line number	Diff line number	Diff line
		@@ -1959,6 +1959,11 @@ static bt_status_t register_notification_rsp(
		dump_rc_notification_event_id(event_id));
		std::unique_lock<std::mutex> lock(btif_rc_cb.lock);

		if (event_id > MAX_RC_NOTIFICATIONS) {
		BTIF_TRACE_ERROR("Invalid event id");
		return BT_STATUS_PARM_INVALID;
		}

		memset(&(avrc_rsp.reg_notif), 0, sizeof(tAVRC_REG_NOTIF_RSP));

		avrc_rsp.reg_notif.event_id = event_id;