| commit | 67b8fbead4685b36d290a0ef91c6ddffc4920ec9 | [log] [tgz] |
|---|---|---|
| author | Loic Poulain <loic.poulain@linaro.org> | Wed Nov 22 15:03:17 2017 +0100 |
| committer | Marcel Holtmann <marcel@holtmann.org> | Wed Dec 13 00:28:41 2017 +0100 |
| tree | 673a8729ad350b8f27384d9ca8ae9045e607ad35 | |
| parent | d73e172816652772114827abaa2dbc053eecbbd7 [diff] |
Bluetooth: btqcomsmd: Fix skb double free corruption
In case of hci send frame failure, skb is still owned
by the caller (hci_core) and then should not be freed.
This fixes crash on dragonboard-410c when sending SCO
packet. skb is freed by both btqcomsmd and hci_core.
Fixes: 1511cc750c3d ("Bluetooth: Introduce Qualcomm WCNSS SMD based HCI driver")
Signed-off-by: Loic Poulain <loic.poulain@linaro.org>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>