aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2022-03-15 18:17:52 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2022-03-15 18:17:52 +0000
commite140c133342a5dd2cf201c01ef39c3baab86c386 (patch)
tree4153d4991014b0944997029d7d144019ae63c147
parent9827945fd41eb3c7940b5ce983e21757fdbae5f6 (diff)
parent2dceafe75bda383e609910b3c882a155a32584af (diff)
downloadbt-android12L-release.tar.gz
Merge cherrypicks of [16816453] into sc-v2-release.android-12.1.0_r6android-12.1.0_r5android-12.1.0_r27android12L-release
Change-Id: I9a0ba25922932a9b49cf4b8d30b930bb9a122f19
-rw-r--r--stack/l2cap/l2c_ble.cc2
1 files changed, 1 insertions, 1 deletions
diff --git a/stack/l2cap/l2c_ble.cc b/stack/l2cap/l2c_ble.cc
index 16454a5b0..d5486794d 100644
--- a/stack/l2cap/l2c_ble.cc
+++ b/stack/l2cap/l2c_ble.cc
@@ -621,7 +621,7 @@ void l2cble_process_sig_cmd(tL2C_LCB* p_lcb, uint8_t* p, uint16_t pkt_len) {
break;
}
case L2CAP_CMD_CREDIT_BASED_CONN_RES:
- if (p + 2 > p_pkt_end) {
+ if (p + 8 > p_pkt_end) {
LOG(ERROR) << "invalid L2CAP_CMD_CREDIT_BASED_CONN_RES len";
return;
}