Bluetooth: Fix possible use after free in delete path

Browse source

We need to use the _sync() version for cancelling the info and security
timer in the L2CAP connection delete path. Otherwise the delayed work
handler might run after the connection object is freed.

Signed-off-by: Ulisses Furquim <ulisses@profusion.mobi>
Acked-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>

...

This commit is contained in:

Ulisses Furquim 2012-01-30 18:26:29 -02:00 • committed by Johan Hedberg

parent 17cd3f374b

commit 127074bfa3

1 changed files with 2 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

net/bluetooth/l2cap_core.c

View file