michaelh/zephyr
1
0
Fork 0
Code Releases Activity

Bluetooth: BAP: Broadcast source fix invalid data pointer

Browse source 
When copying the stream specific codec configuration data,
the value pointer in the bt_data struct was not properly
updated, causing possible invalid data access.

Signed-off-by: Emil Gydesen <emil.gydesen@nordicsemi.no>
This commit is contained in:
Emil Gydesen 2023-04-12 13:43:57 +02:00 • committed by Anas Nashif
commit 66af395726
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
subsys/bluetooth/audio/bap_broadcast_source.c
View file

@ -707,6 +707,10 @@ int bt_bap_broadcast_source_create(struct bt_bap_broadcast_source_create_param *
stream_param->data,
stream_param->data_count * sizeof(*stream_param->data));
source->stream_data[stream_count].data_count = stream_param->data_count;
for (uint8_t i = 0U; i < stream_param->data_count; i++) {
source->stream_data[stream_count].data[i].data.data =
source->stream_data[stream_count].data[i].value;
}
sys_slist_append(&subgroup->streams, &stream->_node);
stream_count++;