demus/Gadgetbridge
1
0
Fork 0
mirror of https://codeberg.org/Freeyourgadget/Gadgetbridge.git synced 2026-07-31 07:44:24 +02:00
Code Issues 1 Packages Projects Releases Wiki Activity

Huawei: Fix OOM when raw data is received instead of TLV

Browse Source
This commit is contained in:
José Rebelo
2026-05-09 18:45:56 +01:00
parent 2519ed76d7
commit ccf87aa54d
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/src/main/java/nodomain/freeyourgadget/gadgetbridge/devices/huawei/HuaweiTLV.java
+5
View File
@@ -132,6 +132,11 @@ public class HuaweiTLV {
VarInt varInt = new VarInt(buffer, offset + parsed); VarInt varInt = new VarInt(buffer, offset + parsed);
int size = varInt.dValue; int size = varInt.dValue;
parsed += varInt.size; parsed += varInt.size;
if (size < 0 || size > length - parsed) {
throw new ArrayIndexOutOfBoundsException(
"TLV element size " + size + " exceeds remaining buffer length " + (length - parsed)) {
};
}
byte[] value = new byte[size]; byte[] value = new byte[size];
System.arraycopy(buffer, offset + parsed, value, 0, size); System.arraycopy(buffer, offset + parsed, value, 0, size);
put(tag, value); put(tag, value);