Thread (9 messages) 9 messages, 4 authors, 2012-03-01

Re: [PATCH v4 2/2] Bluetooth: Fix possible use after free in delete path

From: Marcel Holtmann <marcel@holtmann.org>
Date: 2012-01-30 21:30:54

Hi Ulisses,
We need to use the _sync() version for cancelling the info and security
timer in the L2CAP connection delete path. Otherwise the delayed work
handler might run after the connection object is freed.

Signed-off-by: Ulisses Furquim <redacted>
---
 net/bluetooth/l2cap_core.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
Acked-by: Marcel Holtmann <marcel@holtmann.org>

Regards

Marcel

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help