aboutsummaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorBrian Gix <bgix@codeaurora.org>2012-03-09 17:07:03 -0500
committerGustavo Padovan <gustavo@padovan.org>2012-03-28 14:06:09 -0400
commit531563850b29726bf37a81e877277902881ab77e (patch)
treebbec7c1432d65063262513003e6231327d91651e /net
parent55ed7d4d1469eafbe3ad7e8fcd44f5af27845a81 (diff)
Bluetooth: mgmt: Fix corruption of device_connected pkt
Incorrect pointer passed to eir_append_data made mgmt_device_connected event unparsable by mgmt user space entity. Signed-off-by: Brian Gix <bgix@codeaurora.org> Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Diffstat (limited to 'net')
-rw-r--r--net/bluetooth/mgmt.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/bluetooth/mgmt.c b/net/bluetooth/mgmt.c
index 7fcff8887131..0e169dacfd4f 100644
--- a/net/bluetooth/mgmt.c
+++ b/net/bluetooth/mgmt.c
@@ -2936,7 +2936,7 @@ int mgmt_device_connected(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2936 name, name_len); 2936 name, name_len);
2937 2937
2938 if (dev_class && memcmp(dev_class, "\0\0\0", 3) != 0) 2938 if (dev_class && memcmp(dev_class, "\0\0\0", 3) != 0)
2939 eir_len = eir_append_data(&ev->eir[eir_len], eir_len, 2939 eir_len = eir_append_data(ev->eir, eir_len,
2940 EIR_CLASS_OF_DEV, dev_class, 3); 2940 EIR_CLASS_OF_DEV, dev_class, 3);
2941 2941
2942 put_unaligned_le16(eir_len, &ev->eir_len); 2942 put_unaligned_le16(eir_len, &ev->eir_len);