Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f8c9022d authored by Jakub Pawlowski's avatar Jakub Pawlowski Committed by android-build-merger
Browse files

Merge "Decrease length after reading from array in process_service_attr_req"... 

Merge "Decrease length after reading from array in process_service_attr_req" into oc-dev am: 2c19354f
am: 86efeea8

Change-Id: I2aef62db7ff8f477c71c94573385a5ffef2b73cf
parents 198093e2 86efeea8

system/stack/sdp/sdp_server.cc

+2 −0
Original line number Diff line number Diff line
@@ -333,9 +333,11 @@ static void process_service_attr_req(tCONN_CB* p_ccb, uint16_t trans_num, 


  /* Extract the record handle */

  BE_STREAM_TO_UINT32(rec_handle, p_req);

  param_len -= sizeof(rec_handle);



  /* Get the max list length we can send. Cap it at MTU size minus overhead */

  BE_STREAM_TO_UINT16(max_list_len, p_req);

  param_len -= sizeof(max_list_len);



  if (max_list_len > (p_ccb->rem_mtu_size - SDP_MAX_ATTR_RSPHDR_LEN))

    max_list_len = p_ccb->rem_mtu_size - SDP_MAX_ATTR_RSPHDR_LEN;