Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 69ec817b authored by Richard Smith's avatar Richard Smith Committed by Automerger Merge Worker
Browse files

Fix memory overflow. am: 8d9eb989 am: f36a6991 am: 2b71057f 

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/bt/+/14424506

Change-Id: I72589c4284074ca76bdc7f27fc2394d84e5125a6
parents da50c04b 2b71057f

system/stack/btm/btm_acl.cc

+2 −2
Original line number Diff line number Diff line
@@ -1612,7 +1612,7 @@ bool BTM_TryAllocateSCN(uint8_t scn) { 
  /* Make sure we don't exceed max port range.

   * Stack reserves scn 1 for HFP, HSP we still do the correct way.

   */

  if ((scn >= BTM_MAX_SCN) || (scn == 1)) return false;

  if ((scn >= BTM_MAX_SCN) || (scn == 1) || (scn == 0)) return false;



  /* check if this port is available */

  if (!btm_cb.btm_scn[scn - 1]) {
@@ -1634,7 +1634,7 @@ bool BTM_TryAllocateSCN(uint8_t scn) { 
 ******************************************************************************/

bool BTM_FreeSCN(uint8_t scn) {

  BTM_TRACE_DEBUG("BTM_FreeSCN ");

  if (scn <= BTM_MAX_SCN) {

  if (scn <= BTM_MAX_SCN && scn > 0) {

    btm_cb.btm_scn[scn - 1] = false;

    return (true);

  } else {