commit | 7f9bcf85168b776133ebb8c7b3f2db16a1ec0f79 | [log] [tgz] |
---|---|---|
author | Zhihai Xu <zhihaixu@google.com> | Wed Jan 15 15:49:21 2014 -0800 |
committer | Zhihai Xu <zhihaixu@google.com> | Wed Jan 15 17:21:53 2014 -0800 |
tree | 2352ef786e91ab8f79506274f203bed2be132b06 | |
parent | 1a558ca6e9e89acbfbcc8ce9889efa96309dfd2e [diff] |
memory corruption on bluetooth stack. This memory corruption will happen if the remote BLE device name is more than 249 bytes (the maximum attribute length our BLE support is 600.). after we send/receive GATT remote device name service attribute. We will copy upto 600 bytes data to a local name buffer with size of 249. This will cause serious memory corruption on the stack memory. bug:12570982 Change-Id: I5b2ffd5f5a16f4d80d5491e86bf18bf47e30629e