[v8,04/12] bluetooth: Add missing validations for SBC codec parameters

Submitted by Pali Rohár on April 6, 2019, 9:15 a.m.

Details

Message ID 20190406091607.29092-5-pali.rohar@gmail.com
State Accepted
Headers show
Series "New API for Bluetooth A2DP codecs" ( rev: 54 53 52 51 50 49 48 47 46 45 44 43 ) in PulseAudio

Not browsing as part of any series.

Commit Message

Pali Rohár April 6, 2019, 9:15 a.m.
---
 src/modules/bluetooth/a2dp-codec-sbc.c | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

Patch hide | download patch | download mbox

diff --git a/src/modules/bluetooth/a2dp-codec-sbc.c b/src/modules/bluetooth/a2dp-codec-sbc.c
index b735d385c..e590cf01a 100644
--- a/src/modules/bluetooth/a2dp-codec-sbc.c
+++ b/src/modules/bluetooth/a2dp-codec-sbc.c
@@ -145,6 +145,11 @@  static bool is_configuration_valid(const uint8_t *config_buffer, uint8_t config_
         return false;
     }
 
+    if (config->min_bitpool > config->max_bitpool) {
+        pa_log_error("Invalid bitpool in configuration");
+        return false;
+    }
+
     return true;
 }
 
@@ -289,12 +294,18 @@  static uint8_t fill_preferred_configuration(const pa_sample_spec *default_sample
         config->allocation_method = SBC_ALLOCATION_LOUDNESS;
     else if (capabilities->allocation_method & SBC_ALLOCATION_SNR)
         config->allocation_method = SBC_ALLOCATION_SNR;
+    else {
+        pa_log_error("No supported allocation method");
+        return 0;
+    }
 
     config->min_bitpool = (uint8_t) PA_MAX(SBC_MIN_BITPOOL, capabilities->min_bitpool);
     config->max_bitpool = (uint8_t) PA_MIN(default_bitpool(config->frequency, config->channel_mode), capabilities->max_bitpool);
 
-    if (config->min_bitpool > config->max_bitpool)
+    if (config->min_bitpool > config->max_bitpool) {
+        pa_log_error("No supported bitpool");
         return 0;
+    }
 
     return sizeof(*config);
 }