bt: Fixed esp_spp_write() crash when len is 0

Closes #9977
espressif · Oct 26, 2022 · 47232f5 · 47232f5
1 parent dbcf640
commit 47232f5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/components/bt/host/bluedroid/api/esp_spp_api.c b/components/bt/host/bluedroid/api/esp_spp_api.c
@@ -188,6 +188,11 @@ esp_err_t esp_spp_write(uint32_t handle, int len, uint8_t *p_data)
     btc_spp_args_t arg;
     ESP_BLUEDROID_STATUS_CHECK(ESP_BLUEDROID_STATUS_ENABLED);
 
+    if (len <= 0 || p_data == NULL) {
+        LOG_ERROR("Invalid data or len!\n");
+        return ESP_ERR_INVALID_ARG;
+    }
+
     msg.sig = BTC_SIG_API_CALL;
     msg.pid = BTC_PID_SPP;
     msg.act = BTC_SPP_ACT_WRITE;