Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6cb4482f authored by Android Build Merger (Role)'s avatar Android Build Merger (Role)
Browse files

[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 379c3adb am:... 

[automerger] DO NOT MERGE Fix OOB read in process_l2cap_cmd am: 379c3adb am: f9bed1c8 am: 78b7235d am: c342598f

Change-Id: I378c40e92e859a4cc56cc9f829548f87ec428229
parents ead4d1a3 c342598f

system/stack/l2cap/l2c_main.c

+4 −0
Original line number Diff line number Diff line
@@ -562,6 +562,10 @@ static void process_l2cap_cmd (tL2C_LCB *p_lcb, UINT8 *p, UINT16 pkt_len) 
                    /* sanity check option length */

                    if ((cfg_len + L2CAP_CFG_OPTION_OVERHEAD) <= cmd_len)

                    {

                        if (p + cfg_len > p_next_cmd) {

                            android_errorWriteLog(0x534e4554, "79488381");

                            return;

                        }

                        p += cfg_len;

                        if ((cfg_code & 0x80) == 0)

                        {