Fix bt-service crash issue in FHub product 95/274695/3
authorAnuj Jain <anuj01.jain@samsung.com>
Fri, 6 May 2022 07:19:32 +0000 (12:49 +0530)
committerAnuj Jain <anuj01.jain@samsung.com>
Mon, 9 May 2022 08:22:32 +0000 (13:52 +0530)
This patch fixes bt-service crash occuring due to array overflow.

Change-Id: Idde2cccd6e31c2c5fdafc06add7fff6745339fcd
Signed-off-by: Anuj Jain <anuj01.jain@samsung.com>
bt-oal/common/oal-common.c

index 480035702ea3a69cebf4878d034a80777ac20dca..a82ad84ec2f311a11f0aa072387d63c21ad61349 100644 (file)
@@ -105,6 +105,10 @@ void parse_device_properties(int num_properties, bt_property_t *properties,
                        uuid_count = properties[i].len/sizeof(bt_uuid_t);
                        table_len += uuid_count;
                        for (; tmp_uuid_cnt < table_len; tmp_uuid_cnt++) {
+                               if(dev_info->uuid_count >= BT_MAX_SERVICES_FOR_DEVICE) {
+                                       BT_INFO("The max length of UUID exceeded");
+                                       break;
+                               }
                                uuid_to_string(&uuids[tmp_uuid_cnt], lcl_uuid);
                                chk = check_duplicate_uuid(dev_info->uuid,
                                        uuids[tmp_uuid_cnt], dev_info->uuid_count);