Fix SVace issue.

Change-Id: Ib3a04fa87032780368655d08abbc1a58ea8b8faf
Signed-off-by: Deokhyun Kim <dukan.kim@samsung.com>

diff --git a/bt-api/bt-tds.c b/bt-api/bt-tds.c
index c7b983b..947adfc 100644 (file)
--- a/bt-api/bt-tds.c
+++ b/bt-api/bt-tds.c
@@ -140,7 +140,9 @@ BT_EXPORT_API int bluetooth_set_tds_provider_transport_data(unsigned int tds_han
 
        BT_CHECK_ENABLED_LE(return);
 
-       retv_if(length > 0 && NULL == buf, BLUETOOTH_ERROR_INVALID_PARAM);
+       retv_if(NULL == buf, BLUETOOTH_ERROR_INVALID_PARAM);
+       retv_if(length <= 0 || length > BLUETOOTH_TDS_DATA_LENGTH_MAX,
+                       BLUETOOTH_ERROR_INVALID_PARAM);
        tds_data.length = length;
        memcpy(tds_data.data, buf, length);
 

diff --git a/bt-service/bt-service-tds.c b/bt-service/bt-service-tds.c
index 6c00fc5..72f8624 100644 (file)
--- a/bt-service/bt-service-tds.c
+++ b/bt-service/bt-service-tds.c
@@ -948,7 +948,9 @@ int _bt_tds_provider_set_transport_data(char *sender, int tds_handle,
        int ret;
 
        retv_if(NULL == sender, BLUETOOTH_ERROR_INVALID_PARAM);
-       retv_if(len > 0 && NULL == data, BLUETOOTH_ERROR_INVALID_PARAM);
+       retv_if(NULL == data, BLUETOOTH_ERROR_INVALID_PARAM);
+       retv_if(len <= 0 || len > BLUETOOTH_TDS_DATA_LENGTH_MAX,
+                       BLUETOOTH_ERROR_INVALID_PARAM);
 
        BT_DBG("+");