| commit | ee6493462f74013c6f365429401b716500aff838 | [log] [tgz] |
|---|---|---|
| author | Chriz Chow <cmcvista@gmail.com> | Fri Apr 20 15:46:24 2018 +0800 |
| committer | Marcel Holtmann <marcel@holtmann.org> | Fri May 18 06:37:51 2018 +0200 |
| tree | 29fed836bb393f20e99c2e3c9f3876db58602144 | |
| parent | 2cc6d0794cbab470b2d82d5a7547c865fd61e0f3 [diff] |
Bluetooth: Prevent buffer overflow for large advertisement data There are some controllers sending out advertising data with illegal length value which is longer than HCI_MAX_AD_LENGTH, causing the buffer last_adv_data overflows. To avoid these controllers from overflowing the buffer, we do not process the advertisement data if its length is incorrect. Signed-off-by: Chriz Chow <chriz.chow@aminocom.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org>