From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: From: Marcin Kraglak To: linux-bluetooth@vger.kernel.org Subject: [PATCH] android/gatt: Don't process read_by_type request with invalied range Date: Thu, 22 May 2014 12:33:55 +0200 Message-Id: <1400754835-3325-1-git-send-email-marcin.kraglak@tieto.com> Sender: linux-bluetooth-owner@vger.kernel.org List-ID: Return ATT_ECODE_INVALID_HANDLE if range is incorrect. It repairs TC_GAR_SR_BI_08_C test case. --- android/gatt.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/android/gatt.c b/android/gatt.c index 89da60d..dae0df3 100644 --- a/android/gatt.c +++ b/android/gatt.c @@ -4404,6 +4404,9 @@ static uint8_t read_by_type(const uint8_t *cmd, uint16_t cmd_len, if (!len) return ATT_ECODE_INVALID_PDU; + if (start > end) + return ATT_ECODE_INVALID_HANDLE; + q = queue_new(); if (!q) return ATT_ECODE_INSUFF_RESOURCES; -- 1.9.0