From: Peter Hurley Date: Mon, 10 Feb 2014 01:59:18 +0000 (-0500) Subject: Bluetooth: Serialize RFCOMMCREATEDEV and RFCOMMRELEASEDEV ioctls X-Git-Tag: v3.15-rc1~113^2~159^2^2~130^2~56 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=033ace99c444daa4141b84419f670513ce637b77;p=pandora-kernel.git Bluetooth: Serialize RFCOMMCREATEDEV and RFCOMMRELEASEDEV ioctls At least two different race conditions exist with multiple concurrent RFCOMMCREATEDEV and RFCOMMRELEASEDEV ioctls: * Multiple concurrent RFCOMMCREATEDEVs with RFCOMM_REUSE_DLC can mistakenly share the same DLC. * RFCOMMRELEASEDEV can destruct the rfcomm_dev still being constructed by RFCOMMCREATEDEV. Introduce rfcomm_ioctl_mutex to serialize these add/remove operations. Signed-off-by: Peter Hurley Tested-By: Alexander Holler Signed-off-by: Marcel Holtmann --- Reading git-diff-tree failed