]> git.karo-electronics.de Git - linux-beck.git/commit
projects / linux-beck.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 17cd3f3) | patch
Bluetooth: Fix possible use after free in delete path
authorUlisses Furquim <ulisses@profusion.mobi>
Mon, 30 Jan 2012 20:26:29 +0000 (18:26 -0200)
committerJohan Hedberg <johan.hedberg@intel.com>
Mon, 13 Feb 2012 15:01:30 +0000 (17:01 +0200)
commit127074bfa3c11c12e0160437e31b08c6b27412a4
treea70a9ecb8673139263c6f4a631660d15753d9891tree | snapshot
parent17cd3f374be6648bd46c86ff8f2a2511d3f416eecommit | diff
Bluetooth: Fix possible use after free in delete path

We need to use the _sync() version for cancelling the info and security
timer in the L2CAP connection delete path. Otherwise the delayed work
handler might run after the connection object is freed.

Signed-off-by: Ulisses Furquim <ulisses@profusion.mobi>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
net/bluetooth/l2cap_core.c diff | blob | history
Beck SC1x5 Kernel