リビジョン | 4dcb1ef96fd5057afcda534140d3e983a1ff1fc5 (tree) |
---|---|
日時 | 2018-08-30 13:26:31 |
作者 | Hansong Zhang <hsz@goog...> |
コミッター | android-build-team Robot |
Fix a wrong check in rfc_parse_data
Bug: 78288018
Bug: 111436796
Test: manual
Change-Id: I16e6026acbaac230fe1453bbac040d1b75bcea2a
(cherry picked from commit d1ced302cd1066087588c891027b1756be31db46)
@@ -520,7 +520,7 @@ uint8_t rfc_parse_data(tRFC_MCB* p_mcb, MX_FRAME* p_frame, BT_HDR* p_buf) { | ||
520 | 520 | |
521 | 521 | eal = *(p_data)&RFCOMM_EA; |
522 | 522 | len = *(p_data)++ >> RFCOMM_SHIFT_LENGTH1; |
523 | - if (eal == 0 && p_buf->len < RFCOMM_CTRL_FRAME_LEN) { | |
523 | + if (eal == 0 && p_buf->len > RFCOMM_CTRL_FRAME_LEN) { | |
524 | 524 | len += (*(p_data)++ << RFCOMM_SHIFT_LENGTH2); |
525 | 525 | } else if (eal == 0) { |
526 | 526 | RFCOMM_TRACE_ERROR("Bad Length when EAL = 0: %d", p_buf->len); |