tree 60287660d4ea47b1ba1879bfecb03a412382cf13
parent 06870614a8af8c2594185f42d558586f8c5e2aa0
author Luiz Augusto von Dentz <luiz.von.dentz@intel.com> 1505286100 +0300
committer Mattias Nissler <mnissler@chromium.org> 1505377539 +0000

UPSTREAM: sdp: Fix Out-of-bounds heap read in service_search_attr_req function

Check if there is enough data to continue otherwise return an error.

BUG=chromium:764477
TEST=Run bluetooth tests

Change-Id: I7fa958937d9fbc4d5f216b74bb5fa1ddbf648aca
Reviewed-on: https://chromium-review.googlesource.com/665353
Commit-Ready: Miao-chen Chou <mcchou@chromium.org>
Tested-by: Miao-chen Chou <mcchou@chromium.org>
Reviewed-by: Guenter Roeck <groeck@chromium.org>
Reviewed-by: Miao-chen Chou <mcchou@chromium.org>
(cherry picked from commit e6e029e72360f39fdcab56fc0d108c795de9bd51)
Reviewed-on: https://chromium-review.googlesource.com/666797
Reviewed-by: Mattias Nissler <mnissler@chromium.org>
Tested-by: Mattias Nissler <mnissler@chromium.org>