OSDN Git Service

Fix out-of-bounds reading when copy SDP raw data
authorYamei Du <yamei.du@mediatek.com>
Sat, 27 May 2017 02:41:42 +0000 (10:41 +0800)
committerTing Zheng <ting.zheng@mediatek.com>
Wed, 27 Sep 2017 21:30:55 +0000 (14:30 -0700)
commit04da67a727fc293b2535ff327603c0bd7ff07857
treef1499c9e1e47c8fc5dd761396fe0808ee3a07f60
parent5ce55bd2e01e738e7558038c403bc87e035ba583
Fix out-of-bounds reading when copy SDP raw data

When no attribute is returned in the SDP response, the cpy_len will be
MAX_DISC_RAW_DATA_BUF, this will cause out-of-bonds reading of source
buffer when copy the response raw data.

Change-Id: I923d8ee7e08f935e13cec38b75a04beca6174452
stack/sdp/sdp_discovery.cc