diff options
| author | Brian Gix <bgix@codeaurora.org> | 2012-03-09 14:07:03 -0800 |
|---|---|---|
| committer | Gustavo Padovan <gustavo@padovan.org> | 2012-03-28 15:06:09 -0300 |
| commit | 531563850b29726bf37a81e877277902881ab77e (patch) | |
| tree | bbec7c1432d65063262513003e6231327d91651e | |
| parent | 55ed7d4d1469eafbe3ad7e8fcd44f5af27845a81 (diff) | |
| download | linux-stable-531563850b29726bf37a81e877277902881ab77e.tar.gz linux-stable-531563850b29726bf37a81e877277902881ab77e.tar.bz2 linux-stable-531563850b29726bf37a81e877277902881ab77e.zip | |
Bluetooth: mgmt: Fix corruption of device_connected pkt
Incorrect pointer passed to eir_append_data made mgmt_device_connected
event unparsable by mgmt user space entity.
Signed-off-by: Brian Gix <bgix@codeaurora.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
| -rw-r--r-- | net/bluetooth/mgmt.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c index 7fcff8887131..0e169dacfd4f 100644 --- a/net/bluetooth/mgmt.c +++ b/net/bluetooth/mgmt.c @@ -2936,7 +2936,7 @@ int mgmt_device_connected(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type, name, name_len); if (dev_class && memcmp(dev_class, "\0\0\0", 3) != 0) - eir_len = eir_append_data(&ev->eir[eir_len], eir_len, + eir_len = eir_append_data(ev->eir, eir_len, EIR_CLASS_OF_DEV, dev_class, 3); put_unaligned_le16(eir_len, &ev->eir_len); |