Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b9a94d52 authored by Hui Peng's avatar Hui Peng
Browse files

Fix an OOB bug in remove_sdp_record 

Bug: 245517503
Test: manual
Ignore-AOSP-First: security
Change-Id: If768b0b2e11bbc4444835fda28e246e285a7e8ab
parent f9f1695e

system/btif/src/btif_sdp_server.cc

+4 −0
Original line number Diff line number Diff line
@@ -288,6 +288,10 @@ bt_status_t create_sdp_record(bluetooth_sdp_record* record, 
bt_status_t remove_sdp_record(int record_id) {

  int handle;



  if (record_id >= MAX_SDP_SLOTS) {

    return BT_STATUS_PARM_INVALID;

  }



  bluetooth_sdp_record* record;

  bluetooth_sdp_types sdp_type = SDP_TYPE_RAW;

  {