tree 84ffdde499097b48bf4c6490149435c96abf1667
parent 61021c15754056d44d0485e8da01262bb1bd1c02
author Krzysztof Kopyściński <krzysztof.kopyscinski@codecoup.pl> 1713357700 +0200
committer Łukasz Rymanowski <lukasz.rymanowski@codecoup.pl> 1713852955 +0200

host/ble_l2cap_coc: fix possible race condition in L2CAP COC

Two functions: `ble_l2cap_coc_continue_tx` and `ble_l2cap_coc_recv_ready`
can be reached from other task than host, for example separate thread
running in application, by calling `ble_l2cap_recv_ready` or
`ble_l2cap_send`. Because pointer to chan passed into  these functions
may be outdated (connection is being terminated by host) this will lead
to either:
 - triggering BLE_HS_DBG_ASSERT(conn != NULL) in ble_hs_conn_find_assert
 - dereferencing NULL pointer to conn, after ble_hs_conn_find_assert
   returns NULL (case with disabled BLE_HS_DEBUG)
These two cases shall not cause assert, and should be prepared for chan
not existing anymore. Now, BLE_HS_ENOTCONN is returned if connection no
longer exists.