diff
35 	build_lbl_len = edl->data[0];
36 	if (build_lbl_len <= QCA_FW_BUILD_VER_LEN - 1) {
+ 		if (skb->len < sizeof(struct edl_event_hdr) + build_lbl_len + 1) {
+ 			bt_dev_err(hdev, "Insufficient data in response");
+ 			err = -EINVAL;
+ 			goto out;
+ 		}
37 		memcpy(build_label, edl->data + 1, build_lbl_len);
