diff options
| author |   Johan Hedberg <johan.hedberg@intel.com> | 2014-08-11 22:06:39 +0300 |
|---|---|---|
| committer |   Marcel Holtmann <marcel@holtmann.org> | 2014-08-14 08:49:23 +0200 |
| commit | 8ae9b9845b3252216cf5d2e033e5cca41bae48ef (patch) | |
| tree | a87137cef1f5f4c6cde5d25cb6b5a1aed86f401a /include/linux | |
| parent | Bluetooth: Call l2cap_conn_shutdown() when SMP recv callback fails (diff) | |
Bluetooth: Fix double free of SMP data skb
In the case that the SMP recv callback returns error the calling code in
l2cap_core.c expects that it still owns the skb and will try to free it.
The SMP code should therefore not try to free the skb if it return an
error. This patch fixes such behavior in the SMP command handler
function.
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions