- fixed bug in MmsConnection_readMultipleVariables: send invaid messsage and memory access errors when too many items are passed to the function exhausting MMS payload size

src/mms/iso_mms/client/mms_client_connection.c

@@ -2447,15 +2447,19 @@ MmsConnection_readMultipleVariablesAsync(MmsConnection self, MmsError* mmsError,
 
     invokeId = getNextInvokeId(self);
 
-    mmsClient_createReadRequestMultipleValues(invokeId, domainId, items, payload);
+    if (mmsClient_createReadRequestMultipleValues(invokeId, domainId, items, payload) > 0) {
-
+        MmsClientInternalParameter intParam;
-    MmsClientInternalParameter intParam;
+        intParam.ptr = NULL;
-    intParam.ptr = NULL;
 
-    MmsError err = sendAsyncRequest(self, invokeId, payload, MMS_CALL_TYPE_READ_MULTIPLE_VARIABLES, handler, parameter, intParam);
+        MmsError err = sendAsyncRequest(self, invokeId, payload, MMS_CALL_TYPE_READ_MULTIPLE_VARIABLES, handler, parameter, intParam);
 
-    if (mmsError)
+        if (mmsError)
-        *mmsError = err;
+            *mmsError = err;
+    }
+    else {
+        if (mmsError)
+            *mmsError = MMS_ERROR_RESOURCE_CAPABILITY_UNAVAILABLE;
+    }
 
 exit_function:
     return invokeId;