Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 659981f9 authored by Deqiang Chen's avatar Deqiang Chen Committed by Myles Watson
Browse files

hf_client: Pass an empty string when number_present is false 

When the AG dials a number that is more than 32 digits long, the CLCC
response to HF contains an invalid number.  This will be detected and
eventually leads to the number string being null when calling isValidUtf
in current_calls_cb.  This causes isValidUtf() to crash with a null pointer
dereference.

Bug: 128910739
Bug: 109838537

Test: local test to observe no crash at HF side when dialing a long
invalid number in AG (paired phone).

Change-Id: Ie1b9f62007d523e644b54bda50f11975f2b3d034
parent 2d326e48

system/btif/src/btif_hf_client.cc

+1 −1
Original line number Diff line number Diff line
@@ -949,7 +949,7 @@ static void btif_hf_client_upstreams_evt(uint16_t event, char* p_param) { 
                (bthf_client_call_state_t)p_data->clcc.status,

                p_data->clcc.mpty ? BTHF_CLIENT_CALL_MPTY_TYPE_MULTI

                                  : BTHF_CLIENT_CALL_MPTY_TYPE_SINGLE,

                p_data->clcc.number_present ? p_data->clcc.number : NULL);

                p_data->clcc.number_present ? p_data->clcc.number : "");

      break;



    case BTA_HF_CLIENT_CNUM_EVT: