Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2025-08-03 11:56:09 -04:00
Code Issues Projects Releases Packages Wiki Activity

Pull in n-asb-2023-04

Browse source 
Signed-off-by: Tad <tad@spotco.us>
This commit is contained in:
Tad 2023-04-12 15:30:57 -04:00
parent 2cc87c4dc7
commit ed25b69f5f
No known key found for this signature in database
GPG key ID: B286E9F57A07424B
8 changed files with 362 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

36
Patches/LineageOS-14.1/android_system_bt/353755.patch Normal file
View file

@ -0,0 +1,36 @@
From 1f57f8785858f189bf3aa005f4e0cb92388d5d2c Mon Sep 17 00:00:00 2001
From: Hui Peng <phui@google.com>
Date: Fri, 20 Jan 2023 19:39:30 +0000
Subject: [PATCH] Fix an OOB bug in register_notification_rsp
This is a backport of I901d973a736678d7f3cc816ddf0cbbcbbd1fe93f
to rvc-dev.
Bug: 245916076
Test: manual
Ignore-AOSP-First: security
Change-Id: I37a9f45e707702b2ec52b5a2d572f177f2911765
(cherry picked from commit 901e34203c6280d414cbfa3978de04fd6515ffdf)
Merged-In: I37a9f45e707702b2ec52b5a2d572f177f2911765
---
btif/src/btif_rc.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/btif/src/btif_rc.c b/btif/src/btif_rc.c
index 632ec9c33d..b42df67b11 100644
--- a/btif/src/btif_rc.c
+++ b/btif/src/btif_rc.c
@@ -3170,6 +3170,13 @@ static bt_status_t register_notification_rsp(btrc_event_id_t event_id,
BTIF_TRACE_ERROR("Avrcp Event id not registered: event_id = %x", event_id);
return BT_STATUS_NOT_READY;
}
+
+ if (event_id > MAX_RC_NOTIFICATIONS)
+ {
+ BTIF_TRACE_ERROR("Invalid event id");
+ return BT_STATUS_PARM_INVALID;
+ }
+
memset(&(avrc_rsp.reg_notif), 0, sizeof(tAVRC_REG_NOTIF_RSP));
avrc_rsp.reg_notif.event_id = event_id;