Bluetooth: Pass all message parameters to mgmt_start_discovery

The mgmt_start_discovery command contains the type of discovery that
should be started so this should be passed to the start_discovery
function. This patch doesn't yet add any action depending on the type of
the requested discovery.

Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Gustavo F. Padovan <padovan@profusion.mobi>

1 files changed, 8 insertions, 2 deletions

diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c
index e4a353cfa97..1ae14c91bb0 100644
--- a/net/bluetooth/mgmt.c
+++ b/net/bluetooth/mgmt.c
@@ -1779,14 +1779,20 @@ static int remove_remote_oob_data(struct sock *sk, u16 index,
         return err;
 }
 
-static int start_discovery(struct sock *sk, u16 index)
+static int start_discovery(struct sock *sk, u16 index,
+                                                unsigned char *data, u16 len)
 {
+        struct mgmt_cp_start_discovery *cp = (void *) data;
         struct pending_cmd *cmd;
         struct hci_dev *hdev;
         int err;
 
         BT_DBG("hci%u", index);
 
+        if (len != sizeof(*cp))
+                return cmd_status(sk, index, MGMT_OP_START_DISCOVERY,
+                                                MGMT_STATUS_INVALID_PARAMS);
+
         hdev = hci_dev_get(index);
         if (!hdev)
                 return cmd_status(sk, index, MGMT_OP_START_DISCOVERY,
@@ -2083,7 +2089,7 @@ int mgmt_control(struct sock *sk, struct msghdr *msg, size_t msglen)
                                                                         len);
                 break;
         case MGMT_OP_START_DISCOVERY:
-                err = start_discovery(sk, index);
+                err = start_discovery(sk, index, buf + sizeof(*hdr), len);
                 break;
         case MGMT_OP_STOP_DISCOVERY:
                 err = stop_discovery(sk, index);