Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 52f5d0b0 authored by Casper Bonde's avatar Casper Bonde Committed by Matthew Xie
Browse files

MAP: SDP corruption 



Terminate strings before parsing to values.

Might be related to:
bug: 16877287

Change-Id: I0c46861229a90f37e266bd06bcba9ac78e3fc155
Signed-off-by: default avatarCasper Bonde <c.bonde@samsung.com>
parent e11eda16

system/btif/src/btif_sock_sdp.c

+5 −2
Original line number Diff line number Diff line
@@ -231,8 +231,8 @@ static int add_maps_sdp(const char* p_service_name, int scn) 
    UINT16              browse = UUID_SERVCLASS_PUBLIC_BROWSE_GROUP;

    BOOLEAN             status = FALSE;

    UINT32              sdp_handle = 0;

    char                map_handle_buf[2];

    char                map_type_buf[2];

    char                map_handle_buf[3];

    char                map_type_buf[3];

    char                *map_name = (char*)&(p_service_name[4]);

    tBTA_MAPS_CFG       bta_maps_cfg;

    tBTA_MAPS_CFG       *p_bta_maps_cfg;
@@ -242,8 +242,11 @@ static int add_maps_sdp(const char* p_service_name, int scn) 
     * MasId and Type flag as 2byte hex as string */

    map_handle_buf[0] = p_service_name[0];

    map_handle_buf[1] = p_service_name[1];

    map_handle_buf[2] = '\0';



    map_type_buf[0]   = p_service_name[2];

    map_type_buf[1]   = p_service_name[3];

    map_type_buf[2]   = '\0';



    p_bta_maps_cfg = &bta_maps_cfg;

    p_bta_maps_cfg->mas_id = (UINT16)strtol(&map_handle_buf[0],NULL, 16);