]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8ddd8e9) | patch
Bluetooth: Fix possible use after free in delete path
authorUlisses Furquim <ulisses@profusion.mobi>
Mon, 30 Jan 2012 20:26:29 +0000 (18:26 -0200)
committerJohan Hedberg <johan.hedberg@intel.com>
Mon, 13 Feb 2012 15:01:30 +0000 (17:01 +0200)
commit6a15252e82beeca5b91074a5fe5e60f492a3f8cb
treea70a9ecb8673139263c6f4a631660d15753d9891tree | snapshot
parent8ddd8e9fd6fdd01710066f9088397f7de0559b5dcommit | diff
Bluetooth: Fix possible use after free in delete path

We need to use the _sync() version for cancelling the info and security
timer in the L2CAP connection delete path. Otherwise the delayed work
handler might run after the connection object is freed.

Signed-off-by: Ulisses Furquim <ulisses@profusion.mobi>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
net/bluetooth/l2cap_core.c diff | blob | history
Linux Kernel Source Tree.