Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e53df703 authored by Zongheng Wang's avatar Zongheng Wang Committed by android-build-merger
Browse files

SDP: Disconnect when there is a bad length am: f704594f am: e775e16f 

am: 8f49fdc6

Change-Id: I8d078555cba1231252f8d9cbf9c9f911f91a8cb3
parents 0676e41a 8f49fdc6

system/stack/sdp/sdp_discovery.cc

+1 −0
Original line number Diff line number Diff line
@@ -718,6 +718,7 @@ static void process_service_search_attr_rsp(tCONN_CB* p_ccb, uint8_t* p_reply, 
  p = sdpu_get_len_from_type(p, p + p_ccb->list_len, type, &seq_len);

  if (p == NULL || (p + seq_len) > (p + p_ccb->list_len)) {

    SDP_TRACE_WARNING("%s: bad length", __func__);

    sdp_disconnect(p_ccb, SDP_ILLEGAL_PARAMETER);

    return;

  }

  p_end = &p_ccb->rsp_list[p_ccb->list_len];