Thread (4 messages) read the whole thread 4 messages, 2 authors, 2011-12-18

Re: [PATCH] Bluetooth: Fix race condition between RFCOMM and L2CAP

From: Gustavo Padovan <hidden>
Date: 2011-12-18 23:33:18

Hi Andrzej,

* Andrzej Kaczmarek [off-list ref] [2011-11-09 14:12:20 +0100]:
Sometimes when RFCOMM creates underlying L2CAP socket it happens that
rfcomm_security_cfm is called before DLC is linked to session thus
reference count for session struct is 0. As a result rfcomm_session_put
will close session and connection will not be completed.

__rfcomm_dlc_open will now hold reference to rfcomm_session until DLC
is linked to session to prevent the above from happening.

Signed-off-by: Andrzej Kaczmarek <redacted>
---
 net/bluetooth/rfcomm/core.c |   11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)
Can you check if this issue still happens after the workqueue patches. Those
kinds of issue in RFCOMM should be fixed by now.

	Gustavo
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help