Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8d4fac29 authored by Pavlin Radoslavov's avatar Pavlin Radoslavov Committed by android-build-merger
Browse files

Free p_pending_data from tBNEP_CONN to avoid potential memory leaks 

am: 76f88854

Change-Id: Ib41c89b0070c24eb22576bc6536a5b63d19406a7
parents 63f02741 76f88854

system/stack/bnep/bnep_main.c

+1 −0
Original line number Diff line number Diff line
@@ -575,6 +575,7 @@ static void bnep_data_ind (UINT16 l2cap_cid, BT_HDR *p_buf) 
            p_bcb->con_state != BNEP_STATE_CONNECTED &&

            extension_present && p && rem_len)

        {

            osi_free(p_bcb->p_pending_data);

            p_bcb->p_pending_data = (BT_HDR *)osi_malloc(rem_len + sizeof(BT_HDR));

            memcpy((UINT8 *)(p_bcb->p_pending_data + 1), p, rem_len);

            p_bcb->p_pending_data->len    = rem_len;

system/stack/bnep/bnep_utils.c

+1 −0
Original line number Diff line number Diff line
@@ -154,6 +154,7 @@ void bnepu_release_bcb (tBNEP_CONN *p_bcb) 


    /* Drop any response pointer we may be holding */

    p_bcb->con_state        = BNEP_STATE_IDLE;

    osi_free(p_bcb->p_pending_data);

    p_bcb->p_pending_data   = NULL;



    /* Free transmit queue */