From 03fbe9c6217fbce708f7e489cad973b2c1b19b12 Mon Sep 17 00:00:00 2001
From: "matthias.ringwald@gmail.com"
 <matthias.ringwald@gmail.com@1a0a8af8-31b5-11de-8e0c-53a27eea117e>
Date: Mon, 16 Feb 2015 20:38:10 +0000
Subject: [PATCH] fix regression in le_handle_advertisement_report

---
 src/hci.c | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/src/hci.c b/src/hci.c
index 056edd837..587c3908d 100644
--- a/src/hci.c
+++ b/src/hci.c
@@ -726,10 +726,9 @@ void le_handle_advertisement_report(uint8_t *packet, int size){
 
     int i;
     log_info("HCI: handle adv report with num reports: %d", num_reports);
-    uint8_t event[2 + LE_ADVERTISING_DATA_SIZE]; // use upper bound to avoid var size automatic var
+    uint8_t event[12 + LE_ADVERTISING_DATA_SIZE]; // use upper bound to avoid var size automatic var
     for (i=0; i<num_reports;i++){
         uint8_t data_length = packet[offset + 8];
-        uint8_t event_size = 10 + data_length;
         int pos = 0;
         event[pos++] = GAP_LE_ADVERTISING_REPORT;
         event[pos++] = event_size;
@@ -741,8 +740,8 @@ void le_handle_advertisement_report(uint8_t *packet, int size){
         memcpy(&event[pos], &packet[offset], data_length);
         pos += data_length;
         offset += data_length + 1; // rssi
-        hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
-        hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
+        hci_dump_packet( HCI_EVENT_PACKET, 0, event, pos);
+        hci_stack->packet_handler(HCI_EVENT_PACKET, event, pos);
     }
 }
 #endif