mirror of
https://github.com/espressif/esp-idf.git
synced 2026-08-18 06:35:35 +03:00
Merge branch 'bugfix/fix_bt_security' into 'master'
fix(bt/bluedroid): Fix the boundary conditions when checking EIR data See merge request espressif/esp-idf!42253
This commit is contained in:
@@ -2450,7 +2450,7 @@ UINT8 *BTM_CheckEirData( UINT8 *p_eir, UINT8 type, UINT8 *p_length )
|
||||
|
||||
/* Break loop if eir data is in an incorrect format,
|
||||
as it may lead to memory overflow */
|
||||
if ( p >= p_eir + HCI_EXT_INQ_RESPONSE_LEN ) {
|
||||
if ( p >= p_eir + HCI_EXT_INQ_RESPONSE_LEN - 1 ) {
|
||||
break;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user