diff options
| author | Stanley Tng <stng@google.com> | 2018-04-05 09:54:13 -0700 |
|---|---|---|
| committer | MSe <mse1969@posteo.de> | 2018-06-08 18:53:17 +0200 |
| commit | 0909ead92cb31faf2bc8e162e67abed51f4bc3c5 (patch) | |
| tree | f63ebd07e0d89389fad34f7d78ffb76264557f47 /device | |
| parent | c30f6c6386201c0a1f1f503da249e5960f83d69a (diff) | |
| download | android_system_bt-0909ead92cb31faf2bc8e162e67abed51f4bc3c5.tar.gz android_system_bt-0909ead92cb31faf2bc8e162e67abed51f4bc3c5.tar.bz2 android_system_bt-0909ead92cb31faf2bc8e162e67abed51f4bc3c5.zip | |
DO NOT MERGE Handle bad packet length in gatts_process_read_req
Added error check and handling code in gatts_process_read_req to
make sure that the packet length is correct.
Please note that there is another earlier CL that is reverted and this
is the updated one.
Bug: 73172115
Test: Run the test program, poc, that was attached in the bug report
Merged-In: Ia9b4e502fa8f8384bf9767e68f73b48a0915141b
Change-Id: Ia9b4e502fa8f8384bf9767e68f73b48a0915141b
(cherry picked from commit cc9c7330d1c3507d745170ae7b2e0546197b7acb)
(cherry picked from commit 16f4c21be5bd0ea1968eee8a0f00648b1e326253)
CVE-2018-9358
Diffstat (limited to 'device')
0 files changed, 0 insertions, 0 deletions