| commit | 5daf0b2fada094401bcea8ae6bb4f82c274c0ba0 | [log] [tgz] |
|---|---|---|
| author | Mark Wang <yichang.wang@nxp.com> | Wed Jun 23 21:20:38 2021 +0800 |
| committer | Johan Hedberg <johan.hedberg@gmail.com> | Thu Jun 24 11:57:33 2021 +0300 |
| tree | b7a0dd57e40164ee5527b2d5cb5a806f7bac7b35 | |
| parent | 9adf155b6264917fe8e96a20ecdcb8f5305f6fd0 [diff] |
bluetooth: rfcomm: fix the coverity 203443 memory corruptions - Coverity think it is out-of-bound writing because the codes write two bytes to address (&hdr->length) that hdr->length is uint8_t. Coverity doesn't think about the one more byte after the hdr->length. - Use net_buf_push to resolve this issue. Signed-off-by: Mark Wang <yichang.wang@nxp.com>