git.openpandora.org / pandora-kernel.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 1d56dc4)
Bluetooth: Ignore H5 non-link packets in non-active state
authorLoic Poulain <loic.poulain@intel.com>
Mon, 23 Jun 2014 15:42:44 +0000 (17:42 +0200)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 23 Jun 2014 16:22:48 +0000 (18:22 +0200)
When detecting a non-link packet, h5_reset_rx() frees the Rx skb.
Not returning after that will cause the upcoming h5_rx_payload()
call to dereference a now NULL Rx skb and trigger a kernel oops.

Signed-off-by: Loic Poulain <loic.poulain@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: stable@vger.kernel.org
drivers/bluetooth/hci_h5.c patch | blob | history

diff --cc drivers/bluetooth/hci_h5.c
Simple merge
Pandora Kernel Repository