espressif/esp-nimble
1
0
Fork 0
mirror of https://github.com/espressif/esp-nimble.git synced 2026-10-06 14:47:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

nimble/host: Fix NULL pointer dereference on invalid conn_handle

Browse Source 
Added a check to verify if the connection object is not NULL.
This prevents a crash when debug assertions are disabled.
This commit is contained in:
Wiktor Kwiatkowski
2026-08-03 15:39:51 +05:30
committed by Rahul Tank
parent f8b5dacafa
commit 769246c1de
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nimble/host/src/ble_sm.c
+7 -1
View File
@@ -1532,6 +1532,13 @@ ble_sm_ltk_req_rx(const struct ble_hci_ev_le_subev_lt_key_req *ev)
memset(&res, 0, sizeof res);
ble_hs_lock();
conn = ble_hs_conn_find_assert(conn_handle);
if (conn == NULL) {
ble_hs_unlock();
return BLE_HS_ENOENT;
}
proc = ble_sm_proc_find(conn_handle, BLE_SM_PROC_STATE_NONE, 0, NULL);
if (proc == NULL) {
/* The peer is attempting to restore a encrypted connection via the
@@ -1571,7 +1578,6 @@ ble_sm_ltk_req_rx(const struct ble_hci_ev_le_subev_lt_key_req *ev)
}
if (restore) {
conn = ble_hs_conn_find_assert(conn_handle);
ble_hs_conn_addrs(conn, &addrs);
memcpy(peer_id_addr, addrs.peer_id_addr.val, 6);
}