Bluetooth: ISO: free rx_skb if not consumed

If iso_conn is freed when RX is incomplete, free any leftover skb piece.

Fixes: dc26097bdb86 ("Bluetooth: ISO: Use kref to track lifetime of iso_conn")
Signed-off-by: Pauli Virtanen <pav@iki.fi>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>

diff --git a/net/bluetooth/iso.c b/net/bluetooth/iso.c
index d24c7a1ace92bba2ff1374e319a320aa06bb9378..ad5c8118a6e3dbd3550da2be34feddbddeabdcb7 100644 (file)
--- a/net/bluetooth/iso.c
+++ b/net/bluetooth/iso.c
@@ -111,6 +111,8 @@ static void iso_conn_free(struct kref *ref)
        /* Ensure no more work items will run since hci_conn has been dropped */
        disable_delayed_work_sync(&conn->timeout_work);
 
+       kfree_skb(conn->rx_skb);
+
        kfree(conn);
 }