Fix a potential OOB bug in SDP_AddAttribute
`num_array` is not zero initialized and passed to `SDP_TRACE_DEBUG` as a string, which dumps the memory pointed by `num_array` until it sees a zero byte. If `num_array` (allocated from the stack, containing random values) does not contain zero byte, OOB access happens. Bug: 263183883 Test: manual Tag: #security Ignore-AOSP-First: Security Change-Id: Iad4c3a426ab4132787b63321b24ed1d8e07b3973
Loading
Please register or sign in to comment