Re: [PATCH] Bluetooth: Fix double free of SMP data skb

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

On Mon, Aug 11, 2014, johan.hedberg@xxxxxxxxx wrote:
> In the case that the SMP recv callback returns error the calling code in
> l2cap_core.c expects that it still owns the skb and will try to free it.
> The SMP code should therefore not try to free the skb if it return an
> error. This patch fixes such behavior in the SMP command handler
> function.
> 
> Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
> ---
> This patch should probably get Cc: stable, however it should only be
> applied after my "[PATCH 0/3] Some more SMP fixes" patch set. The reason
> I ordered these like this is for this patch to have the familiar
> smp_sig_channel function name to ease backporting.

Correction to this backporting part: I must have been looking at some
other receive path since now that I checked a second time
smp_sig_channel() usage should be fine on old kernels. I.e. this patch
is only needed for bluetooth-next.

Johan
--
To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Bluez Devel]     [Linux Wireless Networking]     [Linux Wireless Personal Area Networking]     [Linux ATH6KL]     [Linux USB Devel]     [Linux Media Drivers]     [Linux Audio Users]     [Linux Kernel]     [Linux SCSI]     [Big List of Linux Books]

  Powered by Linux