Hi, On Mon, Jun 10, 2013 at 1:36 PM, Luiz Augusto von Dentz <luiz.dentz@xxxxxxxxx> wrote: > From: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> > > Reject command if notification is not supported otherwise this can > cause crashes. > --- > profiles/audio/avrcp.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/profiles/audio/avrcp.c b/profiles/audio/avrcp.c > index 4558407..5bddd08 100644 > --- a/profiles/audio/avrcp.c > +++ b/profiles/audio/avrcp.c > @@ -1355,7 +1355,7 @@ static uint8_t avrcp_handle_register_notification(struct avrcp *session, > * one is applicable only for EVENT_PLAYBACK_POS_CHANGED. See AVRCP > * 1.3 spec, section 5.4.2. > */ > - if (len != 5) > + if (len != 5 || !(session->supported_events & (1 << pdu->params[0]))) > goto err; > > switch (pdu->params[0]) { > -- > 1.8.1.4 > This patch-set is now upstream. -- Luiz Augusto von Dentz -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html