Fix buffer overflow potential issue

Change-Id: I01528d16207f5f06599ac556ffaad402d59ff5db
Signed-off-by: Wootak Jung <wootak.jung@samsung.com>

diff --git a/bt-api/bt-event-handler.c b/bt-api/bt-event-handler.c
index 99f056843bd8bb715ca7f7bcd3826a35ce3d4a4d..d41613520e89634da7dfcd790740a329b9fa9ff3 100644 (file)
--- a/bt-api/bt-event-handler.c
+++ b/bt-api/bt-event-handler.c
@@ -334,7 +334,7 @@ static bluetooth_le_device_info_t *__bt_get_le_device_info_in_message(GVariant *
        const char *scan_data = NULL;
        int result = BLUETOOTH_ERROR_NONE;
 
-       g_variant_get(parameters, "(isnniiiiiiin@ayn@ay)", &result, &address,
+       g_variant_get(parameters, "(isnniiiiiiyn@ayn@ay)", &result, &address,
                        &addr_type, &rssi, &event_type, &primary_phy, &secondary_phy,
                        &advertising_sid,&tx_power, &periodic_adv_int, &is_extended,
                        &adv_data_len, &adv_var, &scan_data_len, &scan_var);

diff --git a/bt-service/services/adapter/bt-service-core-adapter-le.c b/bt-service/services/adapter/bt-service-core-adapter-le.c
index 807133cf0fe15df9097fa4b8a73201b838610f3e..ac75e46f9f0b2c5cc70c119c88e5e8a633468d75 100644 (file)
--- a/bt-service/services/adapter/bt-service-core-adapter-le.c
+++ b/bt-service/services/adapter/bt-service-core-adapter-le.c
@@ -999,7 +999,7 @@ static void __bt_le_handle_device_found(event_ble_scan_result_info *scan_result)
                scan_data_param = g_variant_new_from_data((const GVariantType *)"ay",
                                scan_resp_data, scan_resp_len, TRUE, NULL, NULL);
 
-               param = g_variant_new("(isnniiiiiiin@ayn@ay)",
+               param = g_variant_new("(isnniiiiiiyn@ayn@ay)",
                                result, address, scan_result->addr_type,
                                scan_result->rssi, scan_result->event_type,
                                scan_result->primary_phy,