OSDN Git Service

Merge pie-platform-release to aosp-master - DO NOT MERGE
authorBill Yi <byi@google.com>
Wed, 24 Oct 2018 21:48:45 +0000 (14:48 -0700)
committerBill Yi <byi@google.com>
Wed, 24 Oct 2018 21:48:45 +0000 (14:48 -0700)
Change-Id: Id9d96121fb33dba3b75b2b5364da997e30006b36

1  2 
bta/av/bta_av_act.cc
stack/avrc/avrc_pars_ct.cc
stack/mcap/mca_cact.cc
stack/rfcomm/rfc_ts_frames.cc
stack/sdp/sdp_discovery.cc

Simple merge
Simple merge
Simple merge
@@@ -626,7 -619,16 +626,15 @@@ void rfc_process_mx_message(tRFC_MCB* p
    MX_FRAME* p_rx_frame = &rfc_cb.rfc.rx_frame;
    uint16_t length = p_buf->len;
    uint8_t ea, cr, mx_len;
 -  bool is_command;
  
+   if (length < 2) {
+     RFCOMM_TRACE_ERROR(
+         "%s: Illegal MX Frame len when reading EA, C/R. len:%d < 2", __func__,
+         length);
+     android_errorWriteLog(0x534e4554, "111937065");
+     osi_free(p_buf);
+     return;
+   }
    p_rx_frame->ea = *p_data & RFCOMM_EA;
    p_rx_frame->cr = (*p_data & RFCOMM_CR_MASK) >> RFCOMM_SHIFT_CR;
    p_rx_frame->type = *p_data++ & ~(RFCOMM_CR_MASK | RFCOMM_EA_MASK);
Simple merge