Fix bt-service crash issue in FHub product 48/274848/1 accepted/tizen/6.0/unified/20220516.133708 submit/tizen_6.0/20220515.232700
authorAnuj Jain <anuj01.jain@samsung.com>
Fri, 6 May 2022 07:19:32 +0000 (12:49 +0530)
committerWootak Jung <wootak.jung@samsung.com>
Tue, 10 May 2022 22:52:51 +0000 (07:52 +0900)
This patch fixes bt-service crash occuring due to array overflow.

Change-Id: Idde2cccd6e31c2c5fdafc06add7fff6745339fcd
Signed-off-by: Anuj Jain <anuj01.jain@samsung.com>
bt-oal/common/oal-common.c

index 4119ac8021e018097108193271dbb7251cece3df..2e1aacf0c18dc92c6c72c07b8ab3198669c24285 100644 (file)
@@ -105,6 +105,10 @@ void parse_device_properties(int num_properties, bt_property_t *properties,
                        uuid_count = properties[i].len/sizeof(bt_uuid_t);
                        table_len += uuid_count;
                        for (; tmp_uuid_cnt < table_len; tmp_uuid_cnt++) {
+                               if(dev_info->uuid_count >= BT_MAX_SERVICES_FOR_DEVICE) {
+                                       BT_INFO("The max length of UUID exceeded");
+                                       break;
+                               }
                                uuid_to_string(&uuids[tmp_uuid_cnt], lcl_uuid);
                                chk = check_duplicate_uuid(dev_info->uuid,
                                        uuids[tmp_uuid_cnt], dev_info->uuid_count);