Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5b71af8a authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "Add missing extension length check while parsing BNEP control packets" into nyc-dev

parents 76f88854 c8d3ff2c

system/stack/bnep/bnep_utils.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -886,7 +886,7 @@ UINT8 *bnep_process_control_packet (tBNEP_CONN *p_bcb, UINT8 *p, UINT16 *rem_len 
        BNEP_TRACE_ERROR("%s: BNEP - bad ctl pkt type: %d", __func__,

        BNEP_TRACE_ERROR("%s: BNEP - bad ctl pkt type: %d", __func__,

                         control_type);

                         control_type);

        bnep_send_command_not_understood (p_bcb, control_type);

        bnep_send_command_not_understood (p_bcb, control_type);

        if (is_ext)

        if (is_ext && (ext_len > 0))

        {

        {

            if (*rem_len < (ext_len - 1)) {

            if (*rem_len < (ext_len - 1)) {

                goto bad_packet_length;

                goto bad_packet_length;