From: Ohad Ben-Cohen Date: Fri, 2 Nov 2007 03:41:26 +0000 (+0100) Subject: [Bluetooth] Fix NULL pointer dereference in HCI line discipline X-Git-Tag: v2.6.16.57-rc1~8 X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=9ebf0663c8af671f9d37f9d51eb80e26a5b1fe2b;p=karo-tx-linux.git [Bluetooth] Fix NULL pointer dereference in HCI line discipline Normally a serial Bluetooth device is opened, TIOSETD'ed to N_HCI line discipline, HCIUARTSETPROTO'ed and finally closed. In case the device fails to HCIUARTSETPROTO, closing it produces a NULL pointer dereference. Signed-off-by: Ohad Ben-Cohen Signed-off-by: Marcel Holtmann Signed-off-by: Adrian Bunk --- diff --git a/drivers/bluetooth/hci_ldisc.c b/drivers/bluetooth/hci_ldisc.c index 4c0e6d85673d..9e42cc49dce0 100644 --- a/drivers/bluetooth/hci_ldisc.c +++ b/drivers/bluetooth/hci_ldisc.c @@ -313,7 +313,9 @@ static void hci_uart_tty_close(struct tty_struct *tty) if (hu) { struct hci_dev *hdev = hu->hdev; - hci_uart_close(hdev); + + if (hdev) + hci_uart_close(hdev); if (test_and_clear_bit(HCI_UART_PROTO_SET, &hu->flags)) { hu->proto->close(hu);