Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c2eecada authored by Pavlin Radoslavov's avatar Pavlin Radoslavov
Browse files

Use the correct buffer size when copying device inquiry response data 

Bug: 36372989
Test: Running ASAN build
Change-Id: I6016e7609ba24db632222ff4613017e3be30b09c
parent e4fc443c

system/btif/src/btif_dm.cc

+2 −1
Original line number Diff line number Diff line
@@ -784,7 +784,8 @@ static void search_devices_copy_cb(uint16_t event, char* p_dest, char* p_src) { 
        p_dest_data->inq_res.p_eir =

            (uint8_t*)(p_dest + sizeof(tBTA_DM_SEARCH));

        memcpy(p_dest_data->inq_res.p_eir, p_src_data->inq_res.p_eir,

               HCI_EXT_INQ_RESPONSE_LEN);

               p_src_data->inq_res.eir_len);

        p_dest_data->inq_res.eir_len = p_src_data->inq_res.eir_len;

      }

    } break;