Skip to content

Commit 24f8232

Browse files
cvinayaknashif
authored andcommitted
Bluetooth: controller: Fix data PDU leak during ctrl PDU defer
Fix a bug where in tx data PDU enqueued, while a ctrl PDU is deferred due to Encryption setup being in progress, is leaked causing HCI Tx Buffer Overflow crash. Signed-off-by: Vinayak Kariappa Chettimada <[email protected]>
1 parent 14e8f84 commit 24f8232

File tree

1 file changed

+5
-0
lines changed
  • subsys/bluetooth/controller/ll_sw

1 file changed

+5
-0
lines changed

subsys/bluetooth/controller/ll_sw/ctrl.c

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10099,6 +10099,11 @@ static void ctrl_tx_sec_enqueue(struct connection *conn,
1009910099
node_tx->next = conn->pkt_tx_ctrl_last->next;
1010010100
conn->pkt_tx_ctrl_last->next = node_tx;
1010110101
}
10102+
10103+
/* Update last pointer if ctrl added at end of tx list */
10104+
if (!node_tx->next) {
10105+
conn->pkt_tx_last = node_tx;
10106+
}
1010210107
} else {
1010310108
bool pause = false;
1010410109

0 commit comments

Comments
 (0)