Bluetooth: Ignore H5 non-link packets in non-active state
authorLoic Poulain <loic.poulain@intel.com>
Mon, 23 Jun 2014 15:42:44 +0000 (17:42 +0200)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 23 Jun 2014 16:22:48 +0000 (18:22 +0200)
commit48439d501e3d9e8634bdc0c418e066870039599d
tree156194aaaa8cb08115ad44c41d925a72dc8053ad
parent1d56dc4f5f7cdf0ba99062d974b7586a28fc5cf4
Bluetooth: Ignore H5 non-link packets in non-active state

When detecting a non-link packet, h5_reset_rx() frees the Rx skb.
Not returning after that will cause the upcoming h5_rx_payload()
call to dereference a now NULL Rx skb and trigger a kernel oops.

Signed-off-by: Loic Poulain <loic.poulain@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Cc: stable@vger.kernel.org
drivers/bluetooth/hci_h5.c