Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f92283ee authored by Hui Peng's avatar Hui Peng
Browse files

Fix an OOB bug in btm_ble_update_inq_result 

Bug: 264880969
Test: manual
Ignore-AOSP-First: security
Change-Id: I9aa4714a3afffa3451301e21c37787bae99632cf
parent b5b9a4c5

system/stack/btm/btm_ble_gap.cc

+3 −0
Original line number Diff line number Diff line
@@ -2439,6 +2439,9 @@ void btm_ble_update_inq_result(tINQ_DB_ENT* p_i, uint8_t addr_type, 
                BTM_BLE_AD_TYPE_SERVICE_DATA_TYPE, &service_data_len))) {

      uint16_t uuid;

      const uint8_t* p_uuid = p_service_data;

      if (service_data_len < 2) {

        continue;

      }

      STREAM_TO_UINT16(uuid, p_uuid);



      if (uuid == 0x184E /* Audio Stream Control service */ ||