bt: audio: shell: Fix possible buffer overflow

Check the size of the search argument in cmd_media_set_search
before copying it.

Signed-off-by: Flavio Ceolin <[email protected]>
(cherry picked from commit e55af04)

Author: Flavio Ceolin

subsys/bluetooth/audio/shell/media_controller.c

@@ -1230,9 +1230,16 @@ static int cmd_media_set_search(const struct shell *sh, size_t argc, char *argv[
 	 */
 
 	struct mpl_search search;
+	size_t len;
 	int err;
 
-	search.len = strlen(argv[1]);
+	len = strlen(argv[1]);
+	if (len > sizeof(search.search)) {
+		shell_print(sh, "Fail: Invalid argument");
+		return -EINVAL;
+	}
+
+	search.len = len;
 	memcpy(search.search, argv[1], search.len);
 	LOG_DBG("Search string: %s", argv[1]);