Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c9ff91e3 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "SDP: Disconnect when there is a bad length"

parents 4d7e7e54 eef1b41c

system/stack/sdp/sdp_discovery.cc

+1 −0
Original line number Diff line number Diff line
@@ -657,6 +657,7 @@ static void process_service_search_attr_rsp(tCONN_CB* p_ccb, uint8_t* p_reply, 
  p = sdpu_get_len_from_type(p, p + p_ccb->list_len, type, &seq_len);

  if (p == NULL || (p + seq_len) > (p + p_ccb->list_len)) {

    SDP_TRACE_WARNING("%s: bad length", __func__);

    sdp_disconnect(p_ccb, SDP_ILLEGAL_PARAMETER);

    return;

  }

  p_end = &p_ccb->rsp_list[p_ccb->list_len];