Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b1a8262a authored by Brian Delwiche's avatar Brian Delwiche Committed by Automerger Merge Worker
Browse files

Merge "Add bounds check in avdt_scb_act.cc" into tm-dev am: eac401d9 am: 6d687985 

Original change: https://googleplex-android-review.googlesource.com/c/platform/packages/modules/Bluetooth/+/20068633



Change-Id: Icec31ad0b1aba3682062bda1a77581affe3a5b7e
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 49008ab2 6d687985

system/stack/avdt/avdt_scb_act.cc

+5 −0
Original line number Diff line number Diff line
@@ -1023,6 +1023,11 @@ void avdt_scb_hdl_write_req(AvdtpScb* p_scb, tAVDT_SCB_EVT* p_data) { 


  /* Build a media packet, and add an RTP header if required. */

  if (add_rtp_header) {

    if (p_data->apiwrite.p_buf->offset < AVDT_MEDIA_HDR_SIZE) {

      android_errorWriteWithInfoLog(0x534e4554, "242535997", -1, NULL, 0);

      return;

    }



    ssrc = avdt_scb_gen_ssrc(p_scb);



    p_data->apiwrite.p_buf->len += AVDT_MEDIA_HDR_SIZE;