Bluetooth: Make better use of l2cap_chan reference counting

Browse source

L2CAP sockets contain a pointer to l2cap_chan that needs to be
reference counted in order to prevent a possible dangling pointer when
the channel is freed.

There were a few other cases where an l2cap_chan pointer on the stack
was dereferenced after a call to l2cap_chan_del. Those pointers are
also now reference counted.

Signed-off-by: Mat Martineau <mathewm@codeaurora.org>
Signed-off-by: Gustavo Padovan <gustavo@padovan.org>

...

This commit is contained in:

Mat Martineau 2012-04-27 16:50:50 -07:00 • committed by Gustavo Padovan

parent dbd89fddc1

commit 61d6ef3e34

2 changed files with 9 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

6

net/bluetooth/l2cap_core.c

View file

3

net/bluetooth/l2cap_sock.c

View file