[BlueZ] avrcp: Fix media/folder name not being set

[BlueZ] avrcp: Fix media/folder name not being set

[Bastien Nocera]

*namelen was used before being set.

Fixes: bd8989620ed6 ("avrcp: Fix Out-of-Bounds Read in AVRCP GetFolderItems parsing")
---
 profiles/audio/avrcp.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/profiles/audio/avrcp.c b/profiles/audio/avrcp.c
index 23e959c76917..028c1c254b82 100644
--- a/profiles/audio/avrcp.c
+++ b/profiles/audio/avrcp.c
@@ -2623,7 +2623,7 @@ static gboolean parse_media_name(uint8_t *operands, uint16_t len,
 	namesize = MIN(get_be16(&operands[name_len_offset]),
 			len - name_len_offset - 2);
 	namesize = MIN(namesize, NAME_MAX_LEN - 1);
-	if (*namelen > 0) {
+	if (namesize > 0) {
 		if (len < name_len_offset + 2 + namesize)
 			return FALSE;
 		memcpy(name, &operands[name_len_offset + 2], namesize);
-- 
2.55.0

RE: [BlueZ] avrcp: Fix media/folder name not being set

[bluez.test.bot]

[-- Attachment #1: Type: text/plain, Size: 988 bytes --]

This is automated email and please do not reply to this email!

Dear submitter,

Thank you for submitting the patches to the linux bluetooth mailing list.
This is a CI test results with your patch series:
PW Link:https://patchwork.kernel.org/project/bluetooth/list/?series=1147094

---Test result---

Test Summary:
CheckPatch                    PASS      0.30 seconds
GitLint                       PASS      0.29 seconds
BuildEll                      PASS      20.41 seconds
BluezMake                     PASS      609.28 seconds
MakeCheck                     PASS      3.23 seconds
MakeDistcheck                 PASS      162.52 seconds
CheckValgrind                 PASS      162.28 seconds
CheckSmatch                   PASS      314.03 seconds
bluezmakeextell               PASS      104.43 seconds
IncrementalBuild              PASS      621.28 seconds
ScanBuild                     PASS      988.08 seconds



https://github.com/bluez/bluez/pull/2408

---
Regards,
Linux Bluetooth

Re: [BlueZ] avrcp: Fix media/folder name not being set

[patchwork-bot+bluetooth]

Hello:

This patch was applied to bluetooth/bluez.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Mon, 17 Aug 2026 10:23:07 +0200 you wrote:
> *namelen was used before being set.
> 
> Fixes: bd8989620ed6 ("avrcp: Fix Out-of-Bounds Read in AVRCP GetFolderItems parsing")
> ---
>  profiles/audio/avrcp.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Here is the summary with links:
  - [BlueZ] avrcp: Fix media/folder name not being set
    https://git.kernel.org/pub/scm/bluetooth/bluez.git/?id=58088149872d

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html