]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 01d10f3) | patch
Bluetooth: btqcomsmd: Fix skb double free corruption
authorLoic Poulain <loic.poulain@linaro.org>
Wed, 22 Nov 2017 14:03:17 +0000 (15:03 +0100)
committerMarcel Holtmann <marcel@holtmann.org>
Tue, 12 Dec 2017 23:28:41 +0000 (00:28 +0100)
commit518a8dbb9324fc0deb89a0d6e7187f525e18b993
tree673a8729ad350b8f27384d9ca8ae9045e607ad35tree | snapshot
parent01d10f3315b22510a9b161812af8d2d4106ccb3fcommit | diff
Bluetooth: btqcomsmd: Fix skb double free corruption

In case of hci send frame failure, skb is still owned
by the caller (hci_core) and then should not be freed.

This fixes crash on dragonboard-410c when sending SCO
packet. skb is freed by both btqcomsmd and hci_core.

Fixes: da4ebfed866c ("Bluetooth: Introduce Qualcomm WCNSS SMD based HCI driver")
Signed-off-by: Loic Poulain <loic.poulain@linaro.org>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
drivers/bluetooth/btqcomsmd.c diff | blob | history
Linux Kernel Source Tree.