Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b016e6aa authored by Hansong Zhang's avatar Hansong Zhang
Browse files

DO NOT MERGE Add bounds check for BNEP_Write 

Bug: 74947856
Test: manual
Change-Id: I19d9dee53b9cac800c66becef4861e4ad9602bdf
parent da7ed0d4

system/stack/bnep/bnep_api.c

+9 −0
Original line number Diff line number Diff line
@@ -25,6 +25,7 @@ 
#include <string.h>

#include "bnep_api.h"

#include "bnep_int.h"

#include "log/log.h"





extern fixed_queue_t *btu_general_alarm_queue;
@@ -414,6 +415,10 @@ tBNEP_RESULT BNEP_WriteBuf (UINT16 handle, 
            else

            {

                new_len += 4;

                if (new_len > org_len) {

                    android_errorWriteLog(0x534e4554, "74947856");

                    return BNEP_IGNORE_CMD;

                }

                p_data[2] = 0;

                p_data[3] = 0;

            }
@@ -521,6 +526,10 @@ tBNEP_RESULT BNEP_Write (UINT16 handle, 
            else

            {

                new_len += 4;

                if (new_len > org_len) {

                    android_errorWriteLog(0x534e4554, "74947856");

                    return BNEP_IGNORE_CMD;

                }

                p_data[2] = 0;

                p_data[3] = 0;

            }