diff options
author | Venkata Lakshmi Narayana Gubba <gubbaven@codeaurora.org> | 2020-06-09 21:27:08 +0530 |
---|---|---|
committer | Marcel Holtmann <marcel@holtmann.org> | 2020-06-10 06:42:07 +0200 |
commit | f98aa80ff78c34fe328eb9cd3e2cc3058e42bcfd (patch) | |
tree | e57d21cae70a8ec3915a0788bff87082a2673eda /drivers/bluetooth/btintel.h | |
parent | a9ec8423134a54c9f0ae8d4ef59e1e833ca917c2 (diff) | |
download | lwn-f98aa80ff78c34fe328eb9cd3e2cc3058e42bcfd.tar.gz lwn-f98aa80ff78c34fe328eb9cd3e2cc3058e42bcfd.zip |
Bluetooth: hci_qca: Bug fix during SSR timeout
Due to race conditions between qca_hw_error and qca_controller_memdump
during SSR timeout,the same pointer is freed twice. This results in a
double free. Now a lock is acquired before checking the stauts of SSR
state.
Fixes: d841502c79e3 ("Bluetooth: hci_qca: Collect controller memory dump during SSR")
Signed-off-by: Venkata Lakshmi Narayana Gubba <gubbaven@codeaurora.org>
Reviewed-by: Abhishek Pandit-Subedi <abhishekpandit@chromium.org>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Diffstat (limited to 'drivers/bluetooth/btintel.h')
0 files changed, 0 insertions, 0 deletions