Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2dd63726 authored by Andre Eisenbach's avatar Andre Eisenbach
Browse files

Fix invalid pointer de-reference resulting in a crash 

Bug: 26792899
Change-Id: I0c9a22ef1574e6214c108a4b247cf24e26f71ee9
parent bea6e1fb

system/stack/btm/btm_sec.c

+1 −2
Original line number Diff line number Diff line
@@ -6136,8 +6136,7 @@ static BOOLEAN btm_sec_queue_encrypt_request (BD_ADDR bd_addr, tBT_TRANSPORT tra 
    {

        p_e->psm  = 0;  /* if PSM 0, encryption request */

        p_e->p_callback  = p_callback;

        p_e->p_ref_data = (void *)(p_e + 1);

        *(UINT8 *)p_e->p_ref_data = *(UINT8 *)(p_ref_data);

        p_e->p_ref_data = p_ref_data;

        p_e->transport  = transport;

        memcpy(p_e->bd_addr, bd_addr, BD_ADDR_LEN);

        fixed_queue_enqueue(btm_cb.sec_pending_q, p_e);