Fix interger overflow when parsing avrc response
Convert min_len from 16 bits to 32 bits to avoid length checking overflow. Also, use calloc instead of malloc for list allocation since caller need to clean up string memory in the list items Bug: 242459126 Test: fuzz_avrc Tag: #security Ignore-AOSP-First: Security Change-Id: I7250509f2b320774926a8b24fd28828c5217d8a4
Loading
Please register or sign in to comment