From: Andrei Emeltchenko <andrei.emeltchenko@xxxxxxxxx> Fix size check taking into account that attributes starts from 1 (0 is illegal). --- profiles/audio/avrcp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/audio/avrcp.c b/profiles/audio/avrcp.c index c0e5d07..48c3355 100644 --- a/profiles/audio/avrcp.c +++ b/profiles/audio/avrcp.c @@ -1909,7 +1909,7 @@ static void avrcp_get_current_player_value(struct avrcp *session, struct avrcp_header *pdu = (void *) buf; uint16_t length = AVRCP_HEADER_LENGTH + count + 1; - if (count > AVRCP_ATTRIBUTE_LAST + 1) + if (count > AVRCP_ATTRIBUTE_LAST) return; memset(buf, 0, sizeof(buf)); -- 1.8.3.2 -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html