[PATCH 2/2] layer23 sysinfo: fix parsing of CBCH Mobile Allocation

[Alex Badea]

When calling gsm48_decode_mobile_alloc(), read the length
byte from payload data[], rather than from si->data[].
---
 src/host/layer23/src/common/sysinfo.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/src/host/layer23/src/common/sysinfo.c b/src/host/layer23/src/common/sysinfo.c
index 9aa65c7..8f6b1b5 100644
--- a/src/host/layer23/src/common/sysinfo.c
+++ b/src/host/layer23/src/common/sysinfo.c
@@ -682,7 +682,7 @@ short_read:
 	if (payload_len >= 1 && data[0] == GSM48_IE_CBCH_MOB_AL) {
 		if (payload_len < 1 || payload_len < 2 + data[1])
 			goto short_read;
-		gsm48_decode_mobile_alloc(s->freq, data + 2, si->data[1],
+		gsm48_decode_mobile_alloc(s->freq, data + 2, data[1],
 			s->hopping, &s->hopp_len, 1);
 		payload_len -= 2 + data[1];
 		data += 2 + data[1];
-- 
1.7.0.4