Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 86efeea8 authored by Jakub Pawlowski's avatar Jakub Pawlowski Committed by android-build-merger
Browse files

Merge "Decrease length after reading from array in process_service_attr_req" into oc-dev 

am: 2c19354f

Change-Id: Ib0106a936f256923819aa1acdefcad06e035b1c8
parents 66b70376 2c19354f

system/stack/sdp/sdp_server.cc

+2 −0
Original line number Diff line number Diff line
@@ -335,9 +335,11 @@ static void process_service_attr_req(tCONN_CB* p_ccb, uint16_t trans_num, 


  /* Extract the record handle */

  BE_STREAM_TO_UINT32(rec_handle, p_req);

  param_len -= sizeof(rec_handle);



  /* Get the max list length we can send. Cap it at MTU size minus overhead */

  BE_STREAM_TO_UINT16(max_list_len, p_req);

  param_len -= sizeof(max_list_len);



  if (max_list_len > (p_ccb->rem_mtu_size - SDP_MAX_ATTR_RSPHDR_LEN))

    max_list_len = p_ccb->rem_mtu_size - SDP_MAX_ATTR_RSPHDR_LEN;