Merge "Fix 2 OOB bugs in CreateAudioBroadcast" into udc-dev (e4a78b9f) · Commits · e / os / android_packages_modules_Bluetooth

system/bta/le_audio/broadcaster/broadcaster.cc

+9 −0

Original line number	Diff line number	Diff line
		@@ -426,6 +426,10 @@ class LeAudioBroadcasterImpl : public LeAudioBroadcaster, public BigCallbacks {
		auto stream_context_vec = ltv.Find(
		le_audio::types::kLeAudioMetadataTypeStreamingAudioContext);
		if (stream_context_vec) {
		if (stream_context_vec.value().size() < 2) {
		LOG_ERROR("kLeAudioMetadataTypeStreamingAudioContext size < 2");
		return;
		}
		auto pp = stream_context_vec.value().data();
		UINT16_TO_STREAM(pp, context_type.value());
		}
		@@ -434,6 +438,11 @@ class LeAudioBroadcasterImpl : public LeAudioBroadcaster, public BigCallbacks {
		auto stream_context_vec =
		ltv.Find(le_audio::types::kLeAudioMetadataTypeStreamingAudioContext);
		if (stream_context_vec) {
		if (stream_context_vec.value().size() < 2) {
		LOG_ERROR("kLeAudioMetadataTypeStreamingAudioContext size < 2");
		return;
		}

		auto pp = stream_context_vec.value().data();
		STREAM_TO_UINT16(context_type.value_ref(), pp);
		}