Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a15e361c authored by Ajay Panicker's avatar Ajay Panicker Committed by android-build-merger
Browse files

Merge "AVRCP: Set maximum string length when copying to buffer" into oc-dev... 

Merge "AVRCP: Set maximum string length when copying to buffer" into oc-dev am: e99b1ff8 am: da7bc1ae am: 3ef9cd49
am: 2c9bb1ff

Change-Id: Ib65120d957a2f6afd47fe794dcae95aefd153eeb
parents 1123fc8e 2c9bb1ff

system/stack/avrc/avrc_pars_tg.cc

+5 −2
Original line number Diff line number Diff line
@@ -496,8 +496,11 @@ static tAVRC_STS avrc_pars_browsing_cmd(tAVRC_MSG_BROWSE* p_msg, 
      BE_STREAM_TO_UINT16(p_result->search.string.str_len, p);

      p_result->search.string.p_str = p_buf;

      if (p_buf) {

        if (buf_len > p_result->search.string.str_len)

          buf_len = p_result->search.string.str_len;

        if (p_result->search.string.str_len > buf_len) {

          p_result->search.string.str_len = buf_len;

        } else {

          android_errorWriteLog(0x534e4554, "63146237");

        }

        BE_STREAM_TO_ARRAY(p, p_buf, p_result->search.string.str_len);

      } else {

        status = AVRC_STS_INTERNAL_ERR;