projects / cascardo / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4befb86) | patch
Bluetooth: Fix double free of SMP data skb
authorJohan Hedberg <johan.hedberg@intel.com>
Mon, 11 Aug 2014 19:06:39 +0000 (22:06 +0300)
committerMarcel Holtmann <marcel@holtmann.org>
Thu, 14 Aug 2014 06:49:23 +0000 (08:49 +0200)
commit8ae9b9845b3252216cf5d2e033e5cca41bae48ef
treea87137cef1f5f4c6cde5d25cb6b5a1aed86f401atree | snapshot
parent4befb867b9de8adc56c683f4cf6c9e6c035e94e3commit | diff
Bluetooth: Fix double free of SMP data skb

In the case that the SMP recv callback returns error the calling code in
l2cap_core.c expects that it still owns the skb and will try to free it.
The SMP code should therefore not try to free the skb if it return an
error. This patch fixes such behavior in the SMP command handler
function.

Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/smp.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.