DO NOT MERGE A security fix to check buffer length in l2c_lcc_proc_pdu
Add check to make sure that data buffer is big enough to read the 2 bytes for length. Also, fix a regression from the previous CL that checks the buffer length before doing a memcpy. The previous check is too strict causing valid sized buffers to be rejected. The length check is incorrect and off by the header size. Bug: 120665616 Test: Run the SL4A Test for LE CoC, BleCoCTest Merged-In: I30b7a8af11d3a5f974cb39e06b0e3463bebc8e9a Change-Id: I30b7a8af11d3a5f974cb39e06b0e3463bebc8e9a (cherry picked from commit 3deb5ec3) (cherry picked from commit 1f1d8b97d80d25023c4c7b04d2aa18d367f4158d) (cherry picked from commit 6b2739f309f7719086eb8201b3e1a35ba60035f4)
Loading
Please register or sign in to comment