Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 57465212 authored by Android Build Merger (Role)'s avatar Android Build Merger (Role)
Browse files

[automerger] DO NOT MERGE: Don't reuse buffer when building response am: 45104526 

Change-Id: I4911528515373e3dfc0763d5f793df29fb64d4e8
parents 6c7d5968 45104526

system/stack/avrc/avrc_api.c

+5 −4
Original line number Diff line number Diff line
@@ -316,15 +316,15 @@ static BT_HDR * avrc_proc_vendor_command(UINT8 handle, UINT8 label, 


    if (status != AVRC_STS_NO_ERROR)

    {

        /* use the current GKI buffer to build/send the reject message */

        p_data = (UINT8 *)(p_pkt+1) + p_pkt->offset;

        p_rsp = (BT_HDR*)osi_malloc(BT_DEFAULT_BUFFER_SIZE);

        p_rsp->offset = p_pkt->offset;

        p_data = (uint8_t*)(p_rsp + 1) + p_pkt->offset;

        *p_data++ = AVRC_RSP_REJ;

        p_data += AVRC_VENDOR_HDR_SIZE; /* pdu */

        *p_data++ = 0;                  /* pkt_type */

        UINT16_TO_BE_STREAM(p_data, 1); /* len */

        *p_data++ = status;             /* error code */

        p_pkt->len = AVRC_VENDOR_HDR_SIZE + 5;

        p_rsp = p_pkt;

        p_rsp->len = AVRC_VENDOR_HDR_SIZE + 5;

    }



    return p_rsp;
@@ -472,6 +472,7 @@ static UINT8 avrc_proc_far_msg(UINT8 handle, UINT8 label, UINT8 cr, BT_HDR **pp_ 
            if (p_rsp)

            {

                AVCT_MsgReq( handle, label, AVCT_RSP, p_rsp);

                osi_free_and_reset((void **)pp_pkt);

                drop_code = 3;

            }

            else if (p_msg->hdr.opcode == AVRC_OP_DROP)