diff options
author | Dan Carpenter <dan.carpenter@oracle.com> | 2015-08-01 15:30:08 +0300 |
---|---|---|
committer | Marcel Holtmann <marcel@holtmann.org> | 2015-08-10 21:41:34 +0300 |
commit | 0208bc8803918d7e84f247f1d4f1730171a24c16 (patch) | |
tree | 433a4d7baed7d2c888e83df77f5708939c89bd55 /net/bluetooth/amp.c | |
parent | 2cf1b5ce16b61259e3633fb61e6fedaad6e25fc5 (diff) | |
download | linux-0208bc8803918d7e84f247f1d4f1730171a24c16.tar.xz |
Bluetooth: Fix breakage in amp_write_rem_assoc_frag()
We should be passing the pointer itself instead of the address of the
pointer.
This was a copy and paste bug when we replaced the calls to
hci_send_cmd(). Originally, the arguments were "len, cp" but we
overwrote them with "sizeof(cp), &cp" by mistake.
Fixes: b3d3914006a0 ('Bluetooth: Move amp assoc read/write completed callback to amp.c')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Diffstat (limited to 'net/bluetooth/amp.c')
-rw-r--r-- | net/bluetooth/amp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/bluetooth/amp.c b/net/bluetooth/amp.c index 238ddd3cf95f..e32f34189007 100644 --- a/net/bluetooth/amp.c +++ b/net/bluetooth/amp.c @@ -379,7 +379,7 @@ static bool amp_write_rem_assoc_frag(struct hci_dev *hdev, amp_ctrl_put(ctrl); hci_req_init(&req, hdev); - hci_req_add(&req, HCI_OP_WRITE_REMOTE_AMP_ASSOC, sizeof(cp), &cp); + hci_req_add(&req, HCI_OP_WRITE_REMOTE_AMP_ASSOC, len, cp); hci_req_run_skb(&req, write_remote_amp_assoc_complete); kfree(cp); |