Merge branch 'bugfix/fix_bt_security_v5.5' into 'release/v5.5'

fix(bt/bluedroid): Fix the boundary conditions when checking EIR data (v5.5)

See merge request espressif/esp-idf!42448
This commit is contained in:
Jiang Jiang Jian
2025-10-13 20:39:27 +08:00
@@ -2450,7 +2450,7 @@ UINT8 *BTM_CheckEirData( UINT8 *p_eir, UINT8 type, UINT8 *p_length )
/* Break loop if eir data is in an incorrect format,
as it may lead to memory overflow */
if ( p >= p_eir + HCI_EXT_INQ_RESPONSE_LEN ) {
if ( p >= p_eir + HCI_EXT_INQ_RESPONSE_LEN - 1 ) {
break;
}