commit 644f250acd25ef47950c39349eea6fbfbdd41c14
author Brian Delwiche <delwiche@google.com> Sat Aug 06 02:39:12 2022 +0000
committer Brian Delwiche <delwiche@google.com> Thu Aug 25 20:42:01 2022 +0000
tree bd19129e988ec1bbd5fc9f3584ca88391568dfb2
parent 96f108e8c381e744131dc2f021681b113d6e083b

Add missing increment in bnep_api.cc

Bug: 228450451
Test: manual, pair BT and play audio
Tag: #security
Ignore-AOSP-First: Security
Change-Id: I3e832a8a438c6a7264eb7f2b65eacc717baf4db9

system/stack/bnep/bnep_api.cc

diff --git a/system/stack/bnep/bnep_api.cc b/system/stack/bnep/bnep_api.cc
index ec35dcc..fb2f947 100644
--- a/system/stack/bnep/bnep_api.cc
+++ b/system/stack/bnep/bnep_api.cc
@@ -263,6 +263,7 @@
     p = (uint8_t*)(p_bcb->p_pending_data + 1) + p_bcb->p_pending_data->offset;
     while (extension_present && p && rem_len) {
       ext_type = *p++;
+      rem_len--;
       extension_present = ext_type >> 7;
       ext_type &= 0x7F;