diff options
| author | Tomas Bortoli <tomasbortoli@gmail.com> | 2019-11-01 21:42:44 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-12-01 09:14:15 +0100 |
| commit | 79d404a2aa86efe4f1ade51e054318bd811cce71 (patch) | |
| tree | f8071e38c65ba101654d606d1d29a9ee8bf7b5e2 /virt | |
| parent | 23ec01fdb1c3b9c6c4bf8399f74bb6e297e640e8 (diff) | |
Bluetooth: Fix invalid-free in bcsp_close()
commit cf94da6f502d8caecabd56b194541c873c8a7a3c upstream.
Syzbot reported an invalid-free that I introduced fixing a memleak.
bcsp_recv() also frees bcsp->rx_skb but never nullifies its value.
Nullify bcsp->rx_skb every time it is freed.
Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Reported-by: syzbot+a0d209a4676664613e76@syzkaller.appspotmail.com
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: Alexander Potapenko <glider@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'virt')
0 files changed, 0 insertions, 0 deletions