[nrf fromlist] Bluetooth: Host: L2CAP: Fix seg_recv call on SDU overflow

sjanc · rlubos · commit f9219ba41630 · 2024-11-08T11:08:31.000+01:00
This fix calling seg_recv() callback being called even though channel is being disconnected due to SDU overflow. Upstream PR #: 80911 Signed-off-by: Szymon Janc <szymon.janc@codecoup.pl> (cherry picked from commit 1c79ce0)
diff --git a/subsys/bluetooth/host/l2cap.c b/subsys/bluetooth/host/l2cap.c
@@ -2553,6 +2553,7 @@ static void l2cap_chan_le_recv_seg_direct(struct bt_l2cap_le_chan *chan, struct
 	if (seg->len > sdu_remaining) {
 		LOG_WRN("L2CAP RX PDU total exceeds SDU");
 		bt_l2cap_chan_disconnect(&chan->chan);
+		return;
 	}
 
 	/* Commit receive. */

Original file line number	Diff line number	Diff line change
`@@ -2553,6 +2553,7 @@ static void l2cap_chan_le_recv_seg_direct(struct bt_l2cap_le_chan *chan, struct`
`2553`	`2553`	`if (seg->len > sdu_remaining) {`
`2554`	`2554`	`LOG_WRN("L2CAP RX PDU total exceeds SDU");`
`2555`	`2555`	`bt_l2cap_chan_disconnect(&chan->chan);`
	`2556`	`+ return;`
`2556`	`2557`	`}`
`2557`	`2558`
`2558`	`2559`	`/* Commit receive. */`