[nrf fromlist] bluetooth: host: Fix param_len for LE CS Test command

olivier-le-sage · rlubos · commit 59d05a489d4f · 2025-04-28T16:58:19.000+02:00
The parameter length for this command was missing the additional
length from the arrayed parameters.

Upstream PR #: 89092

Signed-off-by: Olivier Lesage &lt;olivier.lesage@nordicsemi.no&gt;
diff --git a/subsys/bluetooth/host/cs.c b/subsys/bluetooth/host/cs.c
@@ -606,6 +606,10 @@ int bt_le_cs_start_test(const struct bt_le_cs_test_param *params)
 
 	cp->override_parameters_length = override_parameters_length;
 
+	struct bt_hci_cmd_hdr *hdr = (struct bt_hci_cmd_hdr *)buf->data;
+
+	hdr->param_len += override_parameters_length;
+
 	return bt_hci_cmd_send_sync(BT_HCI_OP_LE_CS_TEST, buf, NULL);
 }
 #endif /* CONFIG_BT_CHANNEL_SOUNDING_TEST */

Original file line number	Diff line number	Diff line change
`@@ -606,6 +606,10 @@ int bt_le_cs_start_test(const struct bt_le_cs_test_param *params)`
`606`	`606`
`607`	`607`	`cp->override_parameters_length = override_parameters_length;`
`608`	`608`
	`609`	`+ struct bt_hci_cmd_hdr hdr = (struct bt_hci_cmd_hdr )buf->data;`
	`610`	`+`
	`611`	`+ hdr->param_len += override_parameters_length;`
	`612`	`+`
`609`	`613`	`return bt_hci_cmd_send_sync(BT_HCI_OP_LE_CS_TEST, buf, NULL);`
`610`	`614`	`}`
`611`	`615`	`#endif /* CONFIG_BT_CHANNEL_SOUNDING_TEST */`