| commit | 36010ff6788a058147ae15a1aebf97fd30fa51a9 | |
| author | Marcel Holtmann <marcel@holtmann.org> | |
| Mon, 6 Oct 2008 10:22:51 +0000 (6 12:22 +0200) | ||
| committer | Marcel Holtmann <marcel@holtmann.org> | |
| Mon, 6 Oct 2008 10:22:51 +0000 (6 12:22 +0200) | ||
| tree | ebca6f1912cd4424147414120722ada8e737cb52 | treesnapshot (tar.gz zip) |
| parent | 94aca1dac6f6d21f4b07e4864baf7768cabcc6e7 | commitdiff |
[Bluetooth] Fix double frees on error paths of btusb and bpa10x drivers
The transfer buffer of an URB will be automatically freed when using
the URB_FREE_BUFFER transfer_flag. So the extra calls to kfree() will
cause a double free.
Reported-by: Justin Mattock <justinmattock@gmail.com>
Signed-off-by: Rabin Vincent <rabin@rab.in>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
The transfer buffer of an URB will be automatically freed when using
the URB_FREE_BUFFER transfer_flag. So the extra calls to kfree() will
cause a double free.
Reported-by: Justin Mattock <justinmattock@gmail.com>
Signed-off-by: Rabin Vincent <rabin@rab.in>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
| drivers/bluetooth/bpa10x.c | diffblobblamehistory | |
| drivers/bluetooth/btusb.c | diffblobblamehistory |