Fix invalid pointer de-reference resulting in a crash

Bug: 26792899
Change-Id: I0c9a22ef1574e6214c108a4b247cf24e26f71ee9

diff --git a/stack/btm/btm_sec.c b/stack/btm/btm_sec.c
index cbf9e86..6f4c7f7 100644 (file)
--- a/stack/btm/btm_sec.c
+++ b/stack/btm/btm_sec.c
@@ -6136,8 +6136,7 @@ static BOOLEAN btm_sec_queue_encrypt_request (BD_ADDR bd_addr, tBT_TRANSPORT tra
     {
         p_e->psm  = 0;  /* if PSM 0, encryption request */
         p_e->p_callback  = p_callback;
-        p_e->p_ref_data = (void *)(p_e + 1);
-        *(UINT8 *)p_e->p_ref_data = *(UINT8 *)(p_ref_data);
+        p_e->p_ref_data = p_ref_data;
         p_e->transport  = transport;
         memcpy(p_e->bd_addr, bd_addr, BD_ADDR_LEN);
         fixed_queue_enqueue(btm_cb.sec_pending_q, p_e);