alex/esp-idf
alex/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2024-10-05 20:47:46 -04:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge branch 'bluedroid/memory_full' into 'master'

Browse Source 
fix (Bluedroid) : Fix the memory corruption issue

See merge request espressif/esp-idf!24905
This commit is contained in:
Island 2023-08-10 19:05:32 +08:00
commit ba0b8dcac1
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
components/bt/host/bluedroid/hci/hci_hal_h4.c
View File

@ -600,6 +600,7 @@ ble_hs_hci_rx_evt(uint8_t *hci_ev, void *arg)
} }
uint16_t len = hci_ev[1] + 3; uint16_t len = hci_ev[1] + 3;
uint8_t *data = (uint8_t *)malloc(len); uint8_t *data = (uint8_t *)malloc(len);
assert(data != NULL);
data[0] = 0x04; data[0] = 0x04;
memcpy(&data[1], hci_ev, len - 1); memcpy(&data[1], hci_ev, len - 1);
ble_hci_trans_buf_free(hci_ev); ble_hci_trans_buf_free(hci_ev);
@ -614,6 +615,7 @@ ble_hs_rx_data(struct os_mbuf *om, void *arg)
{ {
uint16_t len = om->om_len + 1; uint16_t len = om->om_len + 1;
uint8_t *data = (uint8_t *)malloc(len); uint8_t *data = (uint8_t *)malloc(len);
assert(data != NULL);
data[0] = 0x02; data[0] = 0x02;
os_mbuf_copydata(om, 0, len - 1, &data[1]); os_mbuf_copydata(om, 0, len - 1, &data[1]);
host_recv_pkt_cb(data, len); host_recv_pkt_cb(data, len);