]> git.baikalelectronics.ru Git - kernel.git/commit
[Bluetooth] Fix double frees on error paths of btusb and bpa10x drivers
authorMarcel Holtmann <marcel@holtmann.org>
Mon, 6 Oct 2008 10:22:51 +0000 (12:22 +0200)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 6 Oct 2008 10:22:51 +0000 (12:22 +0200)
commit0fd9f66a9943fdc3994e3b28a0bf858cc12b1190
treeebca6f1912cd4424147414120722ada8e737cb52
parentf8dd8e0eff42886cde7d26d3f256e21109a00e2c
[Bluetooth] Fix double frees on error paths of btusb and bpa10x drivers

The transfer buffer of an URB will be automatically freed when using
the URB_FREE_BUFFER transfer_flag. So the extra calls to kfree() will
cause a double free.

Reported-by: Justin Mattock <justinmattock@gmail.com>
Signed-off-by: Rabin Vincent <rabin@rab.in>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
drivers/bluetooth/bpa10x.c
drivers/bluetooth/btusb.c