]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7ae43df) | patch
Bluetooth: Fix possible use after free in delete path
authorUlisses Furquim <ulisses@profusion.mobi>
Mon, 30 Jan 2012 20:26:29 +0000 (18:26 -0200)
committerJohan Hedberg <johan.hedberg@intel.com>
Wed, 15 Feb 2012 11:09:26 +0000 (13:09 +0200)
commit30a75ad1725fe5bdb4a11d1fa6dfcffa7ab6e227
treed0331d56b1f94b3614eaade10ca5d1ca0ba8633ctree | snapshot
parent7ae43df558a8b19338c1192a6d025b6165459928commit | diff
Bluetooth: Fix possible use after free in delete path

We need to use the _sync() version for cancelling the info and security
timer in the L2CAP connection delete path. Otherwise the delayed work
handler might run after the connection object is freed.

Signed-off-by: Ulisses Furquim <ulisses@profusion.mobi>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
net/bluetooth/l2cap_core.c diff | blob | history
Linux Kernel Source Tree.