diff options
| author | Claudio Takahasi <claudio.takahasi@openbossa.org> | 2012-06-20 14:27:43 -0300 |
|---|---|---|
| committer | Johan Hedberg <johan.hedberg@intel.com> | 2012-06-27 15:49:18 +0300 |
| commit | 2f8cd0cb7eb9a4bceb1cec221ccd21f76d66f318 (patch) | |
| tree | 00f40acac4e8fbd3a65a12d120aad977dedd6345 /attrib/att.h | |
| parent | f0478f073aff412552b568df96b2e6a5fd68c474 (diff) | |
| download | bluez-2f8cd0cb7eb9a4bceb1cec221ccd21f76d66f318.tar.gz | |
ATT: Avoid invalid memory access for large PDU
This patch avoids invalid memory access when decoding ATT read response
PDUs. The ATT_MTU value is a per ATT Bearer value defined by the higher
layer specification.
Diffstat (limited to 'attrib/att.h')
| -rw-r--r-- | attrib/att.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/attrib/att.h b/attrib/att.h index 144513fe6..1c1102a9c 100644 --- a/attrib/att.h +++ b/attrib/att.h @@ -234,7 +234,7 @@ uint16_t dec_read_blob_req(const uint8_t *pdu, int len, uint16_t *handle, uint16_t enc_read_resp(uint8_t *value, int vlen, uint8_t *pdu, int len); uint16_t enc_read_blob_resp(uint8_t *value, int vlen, uint16_t offset, uint8_t *pdu, int len); -uint16_t dec_read_resp(const uint8_t *pdu, int len, uint8_t *value, int *vlen); +ssize_t dec_read_resp(const uint8_t *pdu, int len, uint8_t *value, int vlen); uint16_t enc_error_resp(uint8_t opcode, uint16_t handle, uint8_t status, uint8_t *pdu, int len); uint16_t enc_find_info_req(uint16_t start, uint16_t end, uint8_t *pdu, int len); |