commit 8fc0ba539dc411059824424026b6d41b1c7e3cfc
author Brian Gix <bgix@codeaurora.org> Sat Feb 19 12:45:43 2011 -0800
committer Johan Hedberg <johan.hedberg@nokia.com> Sun Feb 20 15:26:43 2011 -0300
tree a42d5f21d97071a4ee72be0e5463cd167f54d9c5
parent 646cc43be8b0153b0cadcb2933f635f1ea143715

Fix crash where MTU allowed to be set too large

As previously written, a remote device could request, and we would
accept an MTU larger than what we could support.

src/attrib-server.c

diff --git a/src/attrib-server.c b/src/attrib-server.c
index 6966ad0..4285f6e 100644
--- a/src/attrib-server.c
+++ b/src/attrib-server.c
@@ -639,7 +639,7 @@
 static uint16_t mtu_exchange(struct gatt_channel *channel, uint16_t mtu,
 		uint8_t *pdu, int len)
 {
-	channel->mtu = MIN(mtu, ATT_MAX_MTU);
+	channel->mtu = MIN(mtu, channel->mtu);
 
 	return enc_mtu_resp(channel->mtu, pdu, len);
 }