Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit a9f60549 authored by Jeremy Wu's avatar Jeremy Wu
Browse files

Floss: fix MSBC temp packet decode buffer size

In CL:2989709 there was a change to allow packet size of 24, but
CL:2899167 assumed the packet size is always greater than 60 (a SCO
packet size), and this causes heap buffer overflow.

Bug: 332349377
Tag: #floss
Flag: EXEMPT floss only changes
Test: m Bluetooth && atest --host net_test_stack_btm # with CL:3002551
Change-Id: Ic5923f6ca250d0db20df054ffbd6abd069fd94a3
parent 3505ccf1
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment