tree 386f98c361c57373f0a946d7b955b690adffb7a9
parent 08ab03fda3f641d67e0b465fc7523811b7758261
author Mayank Madhukar <quic_mmadhuka@quicinc.com> 1658925243 +0530
committer Karsten Tausche <karsten@fairphone.com> 1668003473 +0100

AVDTP: Fix a potential overflow about the media payload offset

This variable is uint16, and is possible to overflow when the length of
header extension is larger. Here we compare with the data length to
prevent any exceptions.
Change-Id: If55d77132e893d6856c9f4ccc42d24a6e7cafe29
CRs-Fixed: 3237187
Issue: FP3SEC-679
(cherry picked from commit c7b27bd4a4a6440c52174f0724acdf5e049793e3)