OSDN Git Service

Fix out-of-bounds reading in btm_ble_vendor_capability_vsc_cmpl_cback
authorYamei Du <Yamei.du@mediatek.com>
Mon, 11 Sep 2017 11:10:47 +0000 (19:10 +0800)
committerHansong Zhang <hsz@google.com>
Tue, 28 Aug 2018 22:22:08 +0000 (22:22 +0000)
commit224eff1163daa5295fb88c8f04998f29bc1d31aa
tree76ebed1a7eb734a42d3c448c9159b06712938edc
parent7f29cc5ce2b30e3cc701ff2448a30a29921363df
Fix out-of-bounds reading in btm_ble_vendor_capability_vsc_cmpl_cback

8 bits parameters get 16 bits from buffer in btm_ble_vendor_
capability_vsc_cmpl_cback, which would cause out-of-bounds reading.
Correct STREAM_TO_UINT16 to STREAM_TO_UINT8

Test: manual
Bug: 112167084
Change-Id: Id2b71a8f74eee5d93f287d4705aadab449c55fce
stack/btm/btm_ble_gap.cc