Hi Johan, > The hdev->smp_chan pointer can be NULL if SMP PDUs arrive at unexpected > moments. To avoid NULL pointer dereferences the code should be checking > for this and simply ignore such PDUs. This patch fixes the issue by > adding the checks into each individual PDU handler. It's done there > instead of a global place since for some PDUs it *is* ok for smp_chan to > be NULL (e.g. pairing request and security request). I am not sure we want to ignore such PDUs. Don't we have to respond with an error and actually disconnect at this point. Otherwise this might open up a denial of service attack. Regards Marcel -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html