michaelh/zephyr
1
0
Fork 0
Code Releases Activity

Bluetooth: Fix handle value in completed packets command

Browse source 
The report_completed_packet() function overwrites the original buf
pointer so we have to use a local variable to store the handle value.

Change-Id: I9caada0dd83270f2de998f57940aaf4995a247da
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
This commit is contained in:
Johan Hedberg 2015-10-29 07:40:56 +02:00 • committed by Anas Nashif
commit fa8636c24e
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
net/bluetooth/hci_core.c
View file

@ -84,10 +84,10 @@ static void report_completed_packet(struct net_buf *buf)
{
struct bt_hci_cp_host_num_completed_packets *cp;
uint16_t handle = bt_acl(buf)->handle;
struct bt_hci_handle_count *hc;
BT_DBG("Reporting completed packet for handle %u\n",
bt_acl(buf)->handle);
BT_DBG("Reporting completed packet for handle %u\n", handle);
buf = bt_hci_cmd_create(BT_HCI_OP_HOST_NUM_COMPLETED_PACKETS,
sizeof(*cp) + sizeof(*hc));
@ -100,7 +100,7 @@ static void report_completed_packet(struct net_buf *buf)
cp->num_handles = sys_cpu_to_le16(1);
hc = net_buf_add(buf, sizeof(*hc));
hc->handle = sys_cpu_to_le16(bt_acl(buf)->handle);
hc->handle = sys_cpu_to_le16(handle);
hc->count = sys_cpu_to_le16(1);
bt_hci_cmd_send(BT_HCI_OP_HOST_NUM_COMPLETED_PACKETS, buf);