Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 866f710d authored by Jakub Pawlowski's avatar Jakub Pawlowski
Browse files

Fix potential null dereference in avdt_ccb_hdl_getcap_cmd

Bug: 180421044
Change-Id: I1fccaa1cff055badaa2f156f880a6c6d9c28737a
parent 84e34eb5
Loading
Loading
Loading
Loading
+9 −3
Original line number Diff line number Diff line
@@ -205,10 +205,16 @@ void avdt_ccb_hdl_discover_rsp(AvdtpCcb* p_ccb, tAVDT_CCB_EVT* p_data) {
 *
 ******************************************************************************/
void avdt_ccb_hdl_getcap_cmd(AvdtpCcb* p_ccb, tAVDT_CCB_EVT* p_data) {
  AvdtpScb* p_scb;

  /* look up scb for seid sent to us */
  p_scb = avdt_scb_by_hdl(p_data->msg.single.seid);
  AvdtpScb* p_scb = avdt_scb_by_hdl(p_data->msg.single.seid);

  if (p_scb == nullptr) {
    /* not ok, send reject */
    p_data->msg.hdr.err_code = AVDT_ERR_BAD_STATE;
    p_data->msg.hdr.err_param = p_data->msg.single.seid;
    avdt_msg_send_rej(p_ccb, AVDT_SIG_START, &p_data->msg);
    return;
  }

  p_data->msg.svccap.p_cfg = &p_scb->stream_config.cfg;