p_bcb->con_state != BNEP_STATE_CONNECTED &&
extension_present && p && rem_len)
{
p_bcb->con_state != BNEP_STATE_CONNECTED &&
extension_present && p && rem_len)
{
+ osi_free(p_bcb->p_pending_data);
p_bcb->p_pending_data = (BT_HDR *)osi_malloc(rem_len + sizeof(BT_HDR));
memcpy((UINT8 *)(p_bcb->p_pending_data + 1), p, rem_len);
p_bcb->p_pending_data->len = rem_len;
p_bcb->p_pending_data = (BT_HDR *)osi_malloc(rem_len + sizeof(BT_HDR));
memcpy((UINT8 *)(p_bcb->p_pending_data + 1), p, rem_len);
p_bcb->p_pending_data->len = rem_len;
/* Drop any response pointer we may be holding */
p_bcb->con_state = BNEP_STATE_IDLE;
/* Drop any response pointer we may be holding */
p_bcb->con_state = BNEP_STATE_IDLE;
+ osi_free(p_bcb->p_pending_data);
p_bcb->p_pending_data = NULL;
/* Free transmit queue */
p_bcb->p_pending_data = NULL;
/* Free transmit queue */