Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-08-18 06:35:35 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(bt/bluedroid): fixed buffer overflow in BRSF

Browse Source
This commit is contained in:
Jin Cheng
2025-10-11 18:39:25 +08:00
parent 83a2690415
commit cca774644e
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
components/bt/host/bluedroid/bta/hf_client/bta_hf_client_at.c
View File

@@ -1378,6 +1378,11 @@ void bta_hf_client_at_parse(char *buf, unsigned int len)
osi_free(tmp_buff);
}
/* prevent buffer overflow in cases where LEN exceeds available buffer space */
if (len > BTA_HF_CLIENT_AT_PARSER_MAX_LEN - bta_hf_client_cb.scb.at_cb.offset) {
return;
}
memcpy(bta_hf_client_cb.scb.at_cb.buf + bta_hf_client_cb.scb.at_cb.offset, buf, len);
bta_hf_client_cb.scb.at_cb.offset += len;