Hi Loic, > HCI_UART_PROTO_SET flag is set before hci_uart_set_proto call. If we > receive data from tty layer during this procedure, proto pointer may > not be assigned yet, leading to null pointer dereference in rx method > hci_uart_tty_receive. > > This patch fixes this issue by introducing HCI_UART_PROTO_READY flag in > order to avoid any proto operation before proto opening and assignment. > > Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx> > --- > v2: Use PROTO_READY instead of overloading PROTO_SET ioctl. > > drivers/bluetooth/hci_ldisc.c | 11 +++++++---- > drivers/bluetooth/hci_uart.h | 1 + > 2 files changed, 8 insertions(+), 4 deletions(-) patch has been applied to bluetooth-next tree. Regards Marcel -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
