Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b209c3df authored by Hui Peng's avatar Hui Peng
Browse files

Fix an OOB bug in parameters_response_parser 

Bug: 266433017
Test: manual
Ignore-AOSP-First: security
Tag: #security
Change-Id: I4a8959ac6e5980a6c6d20edcf103482b9916656a
parent c2166e96

system/stack/btm/ble_advertiser_hci_interface.cc

+5 −0
Original line number Diff line number Diff line
@@ -84,6 +84,11 @@ void parameters_response_parser(BleAdvertiserHciInterface::parameters_cb cb, 
  int8_t tx_power;



  uint8_t* pp = ret_params;

  if (ret_params_len < 2) {

    LOG(ERROR) << "unexpected ret_params_len: " << ret_params_len;

    return;

  }



  STREAM_TO_UINT8(status, pp);

  STREAM_TO_INT8(tx_power, pp);