Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4c26a972 authored by Hui Peng's avatar Hui Peng Committed by Automerger Merge Worker
Browse files

Fix a few OOB bugs in CreateAudioBroadcast am: c39e001e 

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/22930404



Change-Id: I9a91f603c54d4eedad2fcbbbd778a374686aef4d
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents cef3267f c39e001e

system/bta/le_audio/broadcaster/broadcaster.cc

+16 −0
Original line number Diff line number Diff line
@@ -276,6 +276,10 @@ class LeAudioBroadcasterImpl : public LeAudioBroadcaster, public BigCallbacks { 
      auto stream_context_vec =

          ltv.Find(le_audio::types::kLeAudioMetadataTypeStreamingAudioContext);

      if (stream_context_vec) {

        if (stream_context_vec.value().size() < 2) {

            LOG_ERROR("kLeAudioMetadataTypeStreamingAudioContext size < 2");

            return;

        }

        auto pp = stream_context_vec.value().data();

        if (stream_context_vec.value().size() < 2) {

          LOG_ERROR("stream_context_vec.value() size < 2");
@@ -288,6 +292,10 @@ class LeAudioBroadcasterImpl : public LeAudioBroadcaster, public BigCallbacks { 
    auto stream_context_vec =

        ltv.Find(le_audio::types::kLeAudioMetadataTypeStreamingAudioContext);

    if (stream_context_vec) {

      if (stream_context_vec.value().size() < 2) {

            LOG_ERROR("kLeAudioMetadataTypeStreamingAudioContext size < 2");

            return;

      }

      auto pp = stream_context_vec.value().data();

      if (stream_context_vec.value().size() < 2) {

        LOG_ERROR("stream_context_vec.value() size < 2");
@@ -339,6 +347,10 @@ class LeAudioBroadcasterImpl : public LeAudioBroadcaster, public BigCallbacks { 
      auto stream_context_vec =

          ltv.Find(le_audio::types::kLeAudioMetadataTypeStreamingAudioContext);

      if (stream_context_vec) {

        if (stream_context_vec.value().size() < 2) {

          LOG_ERROR("kLeAudioMetadataTypeStreamingAudioContext size < 2");

          return;

        }

        auto pp = stream_context_vec.value().data();

        UINT16_TO_STREAM(pp, context_type.value());

      }
@@ -347,6 +359,10 @@ class LeAudioBroadcasterImpl : public LeAudioBroadcaster, public BigCallbacks { 
    auto stream_context_vec =

        ltv.Find(le_audio::types::kLeAudioMetadataTypeStreamingAudioContext);

    if (stream_context_vec) {

      if (stream_context_vec.value().size() < 2) {

        LOG_ERROR("kLeAudioMetadataTypeStreamingAudioContext size < 2");

        return;

      }

      auto pp = stream_context_vec.value().data();

      STREAM_TO_UINT16(context_type.value_ref(), pp);

    }