unit/avrcp: Fix possible buffer overflow

text[] needs to be of size number for get_value_text()

diff --git a/unit/test-avrcp.c b/unit/test-avrcp.c
index 868d350..d4d26be 100644 (file)
--- a/unit/test-avrcp.c
+++ b/unit/test-avrcp.c
@@ -431,10 +431,15 @@ static int get_value_text(struct avrcp *session, uint8_t transaction,
                                uint8_t attr, uint8_t number, uint8_t *values,
                                void *user_data)
 {
-       const char *text[] = { "on" };
+       const char *text[number];
 
        DBG("");
 
+       if (number) {
+               memset(text, 0, number);
+               text[0] = "on";
+       }
+
        avrcp_get_player_values_text_rsp(session, transaction, number,
                                                                values, text);