diff options
| author | Myles Watson <mylesgw@google.com> | 2020-12-04 12:54:27 -0800 |
|---|---|---|
| committer | mosimchah <mosimchah@gmail.com> | 2021-04-13 02:29:09 -0400 |
| commit | 14a57be7b89ddf12d3e8d6da98e666a7c625b451 (patch) | |
| tree | 70e37b1e0e34d32e521bc7b65aaef41aec33efdb /stack/avrc/avrc_opt.cc | |
| parent | 72b8b4776ed216ae64221cbfed0d1135fb0446cc (diff) | |
Bug: 174150451
Test: compilation
Tag: #security
Change-Id: I7a30edacf8377a9feecbb988b099d60d69b46f87
(cherry picked from commit 1f169323d335ab0dc260952c2dd3821144448b11)
Merged-In: I7a30edacf8377a9feecbb988b099d60d69b46f87
(cherry picked from commit 8d461a866a12cd3d7d6d68551a5d2a7139fab2b9)
(cherry picked from commit 41584e84a3288d4dc9770773fa3db81df209ae4c)
Diffstat (limited to 'stack/avrc/avrc_opt.cc')
| -rw-r--r-- | stack/avrc/avrc_opt.cc | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/stack/avrc/avrc_opt.cc b/stack/avrc/avrc_opt.cc index de42e15f1..a9ad908d3 100644 --- a/stack/avrc/avrc_opt.cc +++ b/stack/avrc/avrc_opt.cc @@ -51,7 +51,7 @@ static BT_HDR* avrc_vendor_msg(tAVRC_MSG_VENDOR* p_msg) { CHECK(p_msg != NULL); CHECK(AVRC_META_CMD_BUF_SIZE > (AVRC_MIN_CMD_LEN + p_msg->vendor_len)); - p_cmd = (BT_HDR*)osi_malloc(AVRC_META_CMD_BUF_SIZE); + p_cmd = (BT_HDR*)osi_calloc(AVRC_META_CMD_BUF_SIZE); p_cmd->offset = AVCT_MSG_OFFSET; p_data = (uint8_t*)(p_cmd + 1) + p_cmd->offset; @@ -91,7 +91,7 @@ static BT_HDR* avrc_vendor_msg(tAVRC_MSG_VENDOR* p_msg) { * *****************************************************************************/ uint16_t AVRC_UnitCmd(uint8_t handle, uint8_t label) { - BT_HDR* p_cmd = (BT_HDR*)osi_malloc(AVRC_CMD_BUF_SIZE); + BT_HDR* p_cmd = (BT_HDR*)osi_calloc(AVRC_CMD_BUF_SIZE); uint8_t* p_data; p_cmd->offset = AVCT_MSG_OFFSET; @@ -134,7 +134,7 @@ uint16_t AVRC_UnitCmd(uint8_t handle, uint8_t label) { * *****************************************************************************/ uint16_t AVRC_SubCmd(uint8_t handle, uint8_t label, uint8_t page) { - BT_HDR* p_cmd = (BT_HDR*)osi_malloc(AVRC_CMD_BUF_SIZE); + BT_HDR* p_cmd = (BT_HDR*)osi_calloc(AVRC_CMD_BUF_SIZE); uint8_t* p_data; p_cmd->offset = AVCT_MSG_OFFSET; |