Hi Mat, * Mat Martineau <mathewm@xxxxxxxxxxxxxx> [2012-04-27 16:50:50 -0700]: > L2CAP sockets contain a pointer to l2cap_chan that needs to be > reference counted in order to prevent a possible dangling pointer when > the channel is freed. > > There were a few other cases where an l2cap_chan pointer on the stack > was dereferenced after a call to l2cap_chan_del. Those pointers are > also now reference counted. > > Signed-off-by: Mat Martineau <mathewm@xxxxxxxxxxxxxx> > --- > net/bluetooth/l2cap_core.c | 6 ++++++ > net/bluetooth/l2cap_sock.c | 3 +++ > 2 files changed, 9 insertions(+) Patches 1 to 3 applied to bluetooth-next. Thanks. Gustavo -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
