SDP: Restrict attribute length to SDP_MAX_ATTR_LEN
Use case: Bluetooth crash during the SNS testing. Root Cause: In sdpu_build_partial_attrib_entry there is no length check, it can exceed the maximum allowable value and lead to a crash in memcpy. Fix: Restrict remaining attribute length to SDP_MAX_ATTR_LEN in sdpu_build_partial_attrib_entry. Change-Id: I5bde6868b82e50b3c09cf94277dabb4862f0a2a8
Loading
Please register or sign in to comment