[nrf fromlist] Bluetooth: Host: L2CAP: Fix seg_recv call on SDU overflow

sjanc · rlubos · commit 1c79ce030faa · 2024-11-08T09:29:08.000+01:00
This fix calling seg_recv() callback being called even though channel
is being disconnected due to SDU overflow.

Upstream PR #: 80911

Signed-off-by: Szymon Janc &lt;szymon.janc@codecoup.pl&gt;
diff --git a/subsys/bluetooth/host/l2cap.c b/subsys/bluetooth/host/l2cap.c
@@ -2557,6 +2557,7 @@ static void l2cap_chan_le_recv_seg_direct(struct bt_l2cap_le_chan *chan, struct
 	if (seg->len > sdu_remaining) {
 		LOG_WRN("L2CAP RX PDU total exceeds SDU");
 		bt_l2cap_chan_disconnect(&chan->chan);
+		return;
 	}
 
 	/* Commit receive. */

Original file line number	Diff line number	Diff line change
`@@ -2557,6 +2557,7 @@ static void l2cap_chan_le_recv_seg_direct(struct bt_l2cap_le_chan *chan, struct`
`2557`	`2557`	`if (seg->len > sdu_remaining) {`
`2558`	`2558`	`LOG_WRN("L2CAP RX PDU total exceeds SDU");`
`2559`	`2559`	`bt_l2cap_chan_disconnect(&chan->chan);`
	`2560`	`+ return;`
`2560`	`2561`	`}`
`2561`	`2562`
`2562`	`2563`	`/* Commit receive. */`