zephyr/subsys/bluetooth
Piotr Pryga f24b5b4b43 Bluetooth: host: df: fix wrong connectionless CTE enable cmd length
There were a bug in a prepare_cl_cte_rx_enable_cmd_params function.
The size of command buffer was wrong when CTE enabled in AoD mode.
The command buffer was extended by param->num_ant_ids, that was
zero in case of AoD. Then a dummy antenna switch pattern was copied
into the command buffer.

That lead to: memory overwrite, and wrong command buffer length.
The command was rejected by Controller.

To fix, use cp->switch_pattern_len that was already assigned with
correct antenna pattern length.

Signed-off-by: Piotr Pryga <piotr.pryga@nordicsemi.no>
2022-10-31 11:23:44 +01:00
..
audio Bluetooth: audio: Remove capablilities leftovers 2022-10-31 16:39:05 +09:00
common Bluetooth: extended adv reports with legacy content discardable 2022-10-28 07:55:44 +00:00
controller treewide: Use CONFIG_*_ENDIAN instead of __BYTE_ORDER__ 2022-10-28 19:23:46 +09:00
host Bluetooth: host: df: fix wrong connectionless CTE enable cmd length 2022-10-31 11:23:44 +01:00
mesh Bluetooth: Remove BT_HEXDUMP_DBG 2022-10-25 10:48:17 +02:00
services Bluetooth: OTS - Object Write check parameter properly 2022-09-19 10:57:10 +02:00
shell Bluetooth: audio: Remove capablilities leftovers 2022-10-31 16:39:05 +09:00
CMakeLists.txt
Kconfig Bluetooth: kconfig: Add config options for PAST 2022-10-17 10:14:10 +02:00
Kconfig.adv Bluetooth: Mark Extended Adv as stable 2022-08-16 18:10:59 +02:00
Kconfig.iso bluetooth: kconfig: Hide host options if not available 2022-06-17 10:49:51 -05:00