diff options
author | Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com> | 2021-09-03 06:13:06 +0300 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2021-11-26 13:36:07 +0300 |
commit | 728ff4b213cb6d66505e545ab820f3de5be1662a (patch) | |
tree | 865e7e51d9b00d72290e9cbcc3967171430a6436 /lib | |
parent | 007466218935c54404db3e2851c117da335f7da4 (diff) | |
download | linux-728ff4b213cb6d66505e545ab820f3de5be1662a.tar.xz |
Bluetooth: fix init and cleanup of sco_conn.timeout_work
[ Upstream commit 49d8a5606428ca0962d09050a5af81461ff90fbb ]
Before freeing struct sco_conn, all delayed timeout work should be
cancelled. Otherwise, sco_sock_timeout could potentially use the
sco_conn after it has been freed.
Additionally, sco_conn.timeout_work should be initialized when the
connection is allocated, not when the channel is added. This is
because an sco_conn can create channels with multiple sockets over its
lifetime, which happens if sockets are released but the connection
isn't deleted.
Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work")
Signed-off-by: Desmond Cheong Zhi Xi <desmondcheongzx@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions