gatt: sanitize input at profile registration

Check whether type of UUIDs property of GattProfile1 object
is correct.

Signed-off-by: Manika Shrivastava <manika.sh@samsung.com>
Signed-off-by: Ayush Garg <ayush.garg@samsung.com>

diff --git a/src/gatt-database.c b/src/gatt-database.c
index 75ffd57..9b746fc 100644 (file)
--- a/src/gatt-database.c
+++ b/src/gatt-database.c
@@ -4137,6 +4137,11 @@ static struct external_profile *create_profile(struct gatt_app *app,
                goto fail;
        }
 
+       if (dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_ARRAY) {
+               DBG("UUIDs wrongly formatted");
+               goto fail;
+       }
+
        dbus_message_iter_recurse(&iter, &array);
 
        while (dbus_message_iter_get_arg_type(&array) == DBUS_TYPE_STRING) {