bluetooth: host: Check bounds more explicitly

Co-authored-by: Johan Hedberg <[email protected]> Signed-off-by: Arkadiusz Kozdra <[email protected]>
phan-uy-vu · Feb 28, 2023 · 642548d · 642548d
1 parent 8848380
commit 642548d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/subsys/bluetooth/host/scan.c b/subsys/bluetooth/host/scan.c
@@ -1199,7 +1199,7 @@ void bt_hci_le_adv_report(struct net_buf *buf)
 
 		evt = net_buf_pull_mem(buf, sizeof(*evt));
 
-		if (buf->len <= evt->length) {
+		if (buf->len < evt->length + sizeof(adv_info.rssi)) {
 			LOG_ERR("Unexpected end of buffer");
 			break;
 		}