Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f0e86160 authored by Jakub Pawlowski's avatar Jakub Pawlowski Committed by android-build-merger
Browse files

Merge "Fix out of bounds read in l2c_rcv_acl_data" into oc-dev am: 2d186cb6 

am: d4ee98b3

Change-Id: I127e333244e25e8f3bfe9517fce9d65a9af8c3cf
parents 484a695c d4ee98b3

system/stack/l2cap/l2c_main.cc

+1 −3
Original line number Diff line number Diff line
@@ -66,7 +66,7 @@ void l2c_rcv_acl_data(BT_HDR* p_msg) { 
  uint8_t pkt_type;

  tL2C_LCB* p_lcb;

  tL2C_CCB* p_ccb = NULL;

  uint16_t l2cap_len, rcv_cid, psm;

  uint16_t l2cap_len, rcv_cid;

  uint16_t credit;



  /* Extract the handle */
@@ -173,8 +173,6 @@ void l2c_rcv_acl_data(BT_HDR* p_msg) { 
    osi_free(p_msg);

  } else if (rcv_cid == L2CAP_CONNECTIONLESS_CID) {

    /* process_connectionless_data (p_lcb); */

    STREAM_TO_UINT16(psm, p);

    L2CAP_TRACE_DEBUG("GOT CONNECTIONLESS DATA PSM:%d", psm);



#if (L2CAP_UCD_INCLUDED == TRUE)

    /* if it is not broadcast, check UCD registration */