Merge "Security: Fix out of bound write in HFP client" into tm-dev (99dc2fa0) · Commits · e / os / android_packages_modules_Bluetooth

system/bta/hf_client/bta_hf_client_at.cc

+4 −0

Original line number	Diff line number	Diff line
		@@ -333,6 +333,10 @@ static void bta_hf_client_handle_cind_list_item(tBTA_HF_CLIENT_CB* client_cb,

		APPL_TRACE_DEBUG("%s: %lu.%s <%lu:%lu>", __func__, index, name, min, max);

		if (index >= BTA_HF_CLIENT_AT_INDICATOR_COUNT) {
		return;
		}

		/* look for a matching indicator on list of supported ones */
		for (i = 0; i < BTA_HF_CLIENT_AT_SUPPORTED_INDICATOR_COUNT; i++) {
		if (strcmp(name, BTA_HF_CLIENT_INDICATOR_SERVICE) == 0) {