Bluetooth: GATT: Fix gatt buffer leak for write commands and notify (7304c52e) · Commits · Wenxi XU / zephyr

subsys/bluetooth/host/gatt.c

+16 −2

Changes for subsys/bluetooth/host/gatt.c: 16 added lines, 2 removed lines.
Original line number	Diff line number	Diff line
		@@ -1357,6 +1357,20 @@ struct notify_data {
		};
		};

		static int gatt_send_cb(struct bt_conn conn, struct net_buf buf,
		bt_conn_tx_cb_t cb, void *user_data)
		{
		int err;

		err = bt_att_send(conn, buf, cb, user_data);
		if (err) {
		net_buf_unref(buf);
		return err;
		}

		return 0;
		}

		static int gatt_notify(struct bt_conn *conn, u16_t handle,
		struct bt_gatt_notify_params *params)
		{
		@@ -1389,7 +1403,7 @@ static int gatt_notify(struct bt_conn *conn, u16_t handle,
		net_buf_add(buf, params->len);
		memcpy(nfy->value, params->data, params->len);

		return bt_att_send(conn, buf, params->func, params->user_data);
		return gatt_send_cb(conn, buf, params->func, params->user_data);
		}

		static void gatt_indicate_rsp(struct bt_conn *conn, u8_t err,
		@@ -2926,7 +2940,7 @@ int bt_gatt_write_without_response_cb(struct bt_conn *conn, u16_t handle,

		BT_DBG("handle 0x%04x length %u", handle, length);

		return bt_att_send(conn, buf, func, user_data);
		return gatt_send_cb(conn, buf, func, user_data);
		}

		static int gatt_exec_write(struct bt_conn *conn,