OSDN Git Service

PAN: Always allocate in bta_pan_data_buf_ind_cback
authorMyles Watson <mylesgw@google.com>
Wed, 21 Mar 2018 23:45:32 +0000 (16:45 -0700)
committerMSe <mse1969@posteo.de>
Thu, 7 Jun 2018 20:43:10 +0000 (22:43 +0200)
commitc593df980e205dd60d84f26833de5094f514e127
tree6807b6308de295c7b72d017b320ac8ffee11ea36
parent745c19ec40093ca1c1765dcc7c34987e3eca98b8
PAN: Always allocate in bta_pan_data_buf_ind_cback

Change I63b857d031c55d3a0754e4101e330843eb422b2a caused a double
free.  Move the free call to pan_data_buf_ind_cb().

Free the buffer before every return in pan_data_buf_ind_cb.

Bug: 74950468
Test: manual tethering test with DUT sharing its connection
Change-Id: If4526f3042699581e2cdde79a362eef0f83768eb
Merged-In: If4526f3042699581e2cdde79a362eef0f83768eb
(cherry picked from commit 98232b084c66368234d19fafe3076bc1c0f1b578)
CVE-2018-9356
bta/pan/bta_pan_act.c
stack/bnep/bnep_main.c
stack/pan/pan_main.c