Hi Tomas, > Syzbot reported an invalid-free that I introduced fixing a memleak. > > bcsp_recv() also frees bcsp->rx_skb but never nullifies its value. > Nullify bcsp->rx_skb every time it is freed. > > Signed-off-by: Tomas Bortoli <tomasbortoli@xxxxxxxxx> > Reported-by: syzbot+a0d209a4676664613e76@xxxxxxxxxxxxxxxxxxxxxxxxx > --- > drivers/bluetooth/hci_bcsp.c | 3 +++ > 1 file changed, 3 insertions(+) patch has been applied to bluetooth-next tree. Regards Marcel
