1 files changed, 8 insertions, 0 deletions
diff --git a/stack/smp/smp_main.c b/stack/smp/smp_main.c
index e05f934e1..c02b62e85 100644
--- a/stack/smp/smp_main.c
+++ b/stack/smp/smp_main.c
@@ -20,6 +20,7 @@
 
 #if SMP_INCLUDED == TRUE
 
+#include <cutils/log.h>
 #include <string.h>
 #include "smp_int.h"
 
@@ -770,6 +771,13 @@ void smp_sm_event(tSMP_CB *p_cb, tSMP_EVENT event, void *p_data)
     UINT8           curr_state = p_cb->state;
     tSMP_SM_TBL     state_table;
     UINT8           action, entry, i;
+
+    if (p_cb->role >= 2) {
+        SMP_TRACE_DEBUG("Invalid role: %d", p_cb->role);
+        android_errorWriteLog(0x534e4554, "74121126");
+        return;
+    }
+
     tSMP_ENTRY_TBL  entry_table =  smp_entry_table[p_cb->role];
 
     SMP_TRACE_EVENT("main smp_sm_event");