diff options
| author | Pauli Virtanen <[email protected]> | 2023-08-19 16:33:36 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <[email protected]> | 2023-08-24 12:22:35 -0700 |
| commit | 3344d318337d9dca928fd448e966557ec5063f85 (patch) | |
| tree | 82a6c1b14a5ed03cbee9afc71ab7b35078a454ce /tools/perf/scripts/python/task-analyzer.py | |
| parent | db08722fc7d46168fe31d9b8a7b29229dd959f9f (diff) | |
Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
Not calling hci_(dis)connect_cfm before deleting conn referred to by a
socket generally results to use-after-free.
When cleaning up SCO connections when the parent ACL is deleted too
early, use hci_conn_failed to do the connection cleanup properly.
We also need to clean up ISO connections in a similar situation when
connecting has started but LE Create CIS is not yet sent, so do it too
here.
Fixes: ca1fd42e7dbf ("Bluetooth: Fix potential double free caused by hci_conn_unlink")
Reported-by: [email protected]
Closes: https://lore.kernel.org/linux-bluetooth/[email protected]/
Signed-off-by: Pauli Virtanen <[email protected]>
Signed-off-by: Luiz Augusto von Dentz <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/task-analyzer.py')
0 files changed, 0 insertions, 0 deletions