michaelh/zephyr
1
0
Fork 0
Code Releases Activity

Bluetooth: Dereference NULL pointer after check

Browse source 
Dereference buf->len after buf check for NULL.

Change-Id: I2a5de24c8c2367edfd2c35ae925c5cc5b10b03be
Signed-off-by: Andrei Emeltchenko <andrei.emeltchenko@intel.com>
This commit is contained in:
Andrei Emeltchenko 2016-03-23 17:46:34 +02:00
commit 425ab2a1e9
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
net/bluetooth/l2cap.c
View file

@ -1301,12 +1301,12 @@ int bt_l2cap_chan_send(struct bt_l2cap_chan *chan, struct net_buf *buf)
{
int err;
BT_DBG("chan %p buf %p len %u", chan, buf, buf->len);
if (!buf) {
return -EINVAL;
}
BT_DBG("chan %p buf %p len %u", chan, buf, buf->len);
if (!chan->conn || chan->conn->state != BT_CONN_CONNECTED) {
return -ENOTCONN;
}