• R/O
  • HTTP
  • SSH
  • HTTPS

Commit

Tags
Keine Tags

Frequently used words (click to add to your profile)

javaandroidc++linuxc#objective-ccocoa誰得qtrubypythongamewindowsbathyscaphephpguic翻訳omegattwitterframeworktestbtronarduinovb.net計画中(planning stage)directxpreviewerゲームエンジンdom

system/bt


Commit MetaInfo

Revisionc568fa9088ded964e0ac99db236e612de5d82177 (tree)
Zeit2017-08-09 03:45:12
AutorPavlin Radoslavov <pavlin@goog...>
Commiterandroid-build-team Robot

Log Message

Add missing extension length check while parsing BNEP control packets

Bug: 63146237
Test: External script
Change-Id: I4e519cec1c7dffb8bd42add00bd891e0969a3d9f
(cherry picked from commit 9ab89b7dbe5735b796799f65144efa48595d0230)
(cherry picked from commit dc7700a43189d2a8607b69ae19a6d646f11ddf51)

Ändern Zusammenfassung

Diff

--- a/stack/bnep/bnep_utils.cc
+++ b/stack/bnep/bnep_utils.cc
@@ -832,7 +832,7 @@ uint8_t* bnep_process_control_packet(tBNEP_CONN* p_bcb, uint8_t* p,
832832 BNEP_TRACE_ERROR("%s: BNEP - bad ctl pkt type: %d", __func__,
833833 control_type);
834834 bnep_send_command_not_understood(p_bcb, control_type);
835- if (is_ext) {
835+ if (is_ext && (ext_len > 0)) {
836836 if (*rem_len < (ext_len - 1)) {
837837 goto bad_packet_length;
838838 }