pioduino/esp-idf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ble): fixed use-after-free in bluedroid attp

Browse Source 
(cherry picked from commit 78594e0f6eb95b18bf28a38493245bdb0213f542)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
This commit is contained in:
Zhou Xiao
2026-01-15 19:13:24 +08:00
parent e516267500
commit 861b816965
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/bt/host/bluedroid/stack/gatt/att_protocol.c
+1 -2
View File
@@ -395,8 +395,7 @@ tGATT_STATUS attp_send_msg_to_l2cap(tGATT_TCB *p_tcb, BT_HDR *p_toL2CAP)
} }
if (l2cap_ret == L2CAP_DW_FAILED) { if (l2cap_ret == L2CAP_DW_FAILED) {
GATT_TRACE_DEBUG("ATT failed to pass msg:0x%0x to L2CAP", GATT_TRACE_DEBUG("ATT failed to pass msg to L2CAP");
*((UINT8 *)(p_toL2CAP + 1) + p_toL2CAP->offset));
return GATT_INTERNAL_ERROR; return GATT_INTERNAL_ERROR;
} else if (l2cap_ret == L2CAP_DW_CONGESTED) { } else if (l2cap_ret == L2CAP_DW_CONGESTED) {
GATT_TRACE_DEBUG("ATT congested, message accepted"); GATT_TRACE_DEBUG("ATT congested, message accepted");