michaelh/zephyr
1
0
Fork 0
Code Releases Activity

Bluetooth: Audio: Fix null pointer access in mcc.c

Browse source 
One of the notification callback functions did not properly
get the `read_params` pointer, causing an invalid result of
CONTAINER_OF as it would use a NULL pointer.

Signed-off-by: Emil Gydesen <emil.gydesen@nordicsemi.no>
This commit is contained in:
Emil Gydesen 2022-11-21 14:45:11 +01:00 • committed by Carles Cufí
commit 0a570a25c9
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
subsys/bluetooth/audio/mcc.c
View file

@ -951,7 +951,7 @@ static uint8_t mcs_notify_handler(struct bt_conn *conn,
if (handle == mcs_inst->player_name_handle) {
BT_DBG("Player Name notification");
mcc_read_player_name_cb(conn, 0, NULL, data, length);
mcc_read_player_name_cb(conn, 0, read_params, data, length);
} else if (handle == mcs_inst->track_changed_handle) {
/* The Track Changed characteristic can only be */