Company ID became part of the avrcp header so its size is already accounted in the AVRCP_HEADER_LENGTH define. --- audio/avrcp.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/audio/avrcp.c b/audio/avrcp.c index f06afbf..879e959 100644 --- a/audio/avrcp.c +++ b/audio/avrcp.c @@ -1053,7 +1053,7 @@ static size_t handle_vendordep_pdu(struct avctp *session, uint8_t transaction, pdu->packet_type = 0; pdu->rsvd = 0; - if (operand_count + 3 < AVRCP_HEADER_LENGTH) { + if (operand_count < AVRCP_HEADER_LENGTH) { pdu->params[0] = E_INVALID_COMMAND; goto err_metadata; } -- 1.7.7.1 -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html