From 5a77dc154498fcc1a05469338bb4a571f88adad5 Mon Sep 17 00:00:00 2001 From: Deokhyun Kim Date: Wed, 5 Jul 2017 11:04:31 +0900 Subject: [PATCH] Fix SVace issue. Change-Id: Ib3a04fa87032780368655d08abbc1a58ea8b8faf Signed-off-by: Deokhyun Kim --- bt-api/bt-tds.c | 4 +++- bt-service/bt-service-tds.c | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/bt-api/bt-tds.c b/bt-api/bt-tds.c index c7b983b..947adfc 100644 --- a/bt-api/bt-tds.c +++ b/bt-api/bt-tds.c @@ -140,7 +140,9 @@ BT_EXPORT_API int bluetooth_set_tds_provider_transport_data(unsigned int tds_han BT_CHECK_ENABLED_LE(return); - retv_if(length > 0 && NULL == buf, BLUETOOTH_ERROR_INVALID_PARAM); + retv_if(NULL == buf, BLUETOOTH_ERROR_INVALID_PARAM); + retv_if(length <= 0 || length > BLUETOOTH_TDS_DATA_LENGTH_MAX, + BLUETOOTH_ERROR_INVALID_PARAM); tds_data.length = length; memcpy(tds_data.data, buf, length); diff --git a/bt-service/bt-service-tds.c b/bt-service/bt-service-tds.c index 6c00fc5..72f8624 100644 --- a/bt-service/bt-service-tds.c +++ b/bt-service/bt-service-tds.c @@ -948,7 +948,9 @@ int _bt_tds_provider_set_transport_data(char *sender, int tds_handle, int ret; retv_if(NULL == sender, BLUETOOTH_ERROR_INVALID_PARAM); - retv_if(len > 0 && NULL == data, BLUETOOTH_ERROR_INVALID_PARAM); + retv_if(NULL == data, BLUETOOTH_ERROR_INVALID_PARAM); + retv_if(len <= 0 || len > BLUETOOTH_TDS_DATA_LENGTH_MAX, + BLUETOOTH_ERROR_INVALID_PARAM); BT_DBG("+"); -- 2.7.4