Here are two bug fixes for git://git.kernel.org/pub/scm/linux/kernel/git/padovan/bluetooth.git The first is a pretty obvious fix where an RFCOMM disconnect timer needs to be cancelled when the disconnect happens earlier. It's not clear why the reference counting logic breaks down if this timer is not cancelled, but it's definitely more correct to cancel the timer. The L2CAP fix came up due to a buggy PTS test, which was not sending the L2CAP RFC option in an ERTM config response. This was causing access to uninitialized data. Mat Martineau (2): Bluetooth: Clear RFCOMM session timer when disconnecting last channel Bluetooth: Prevent uninitialized data access in L2CAP configuration net/bluetooth/l2cap_core.c | 16 +++++++++++++++- net/bluetooth/rfcomm/core.c | 1 + 2 files changed, 16 insertions(+), 1 deletions(-) -- 1.7.8 -- Mat Martineau Employee of Qualcomm Innovation Center, Inc. Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html