Re: [PATCH] rfcomm/core.c avoid dangling pointer, check session

From: John W. Linville
Date: Tue Mar 22 2011 - 10:15:20 EST


On Mon, Mar 21, 2011 at 09:38:10PM -0500, David Fries wrote:
> rfcomm_process_sessions is calling rfcomm_process_rx, but
> in this case the session is closed and freed leaving a
> dangling pointer that blows up when rfcomm_process_rx returns
> and rfcomm_process_dlcs is called with the now dangling session
> pointer.

Please trim this commit log substantially before the patch is merged...

--
John W. Linville Someday the world will need a hero, and you
linville@xxxxxxxxxxxxx might be all we have. Be ready.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/