]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: hci_qca: Bug fix during SSR timeout
authorVenkata Lakshmi Narayana Gubba <gubbaven@codeaurora.org>
Tue, 9 Jun 2020 15:57:08 +0000 (21:27 +0530)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 19 Aug 2020 06:23:45 +0000 (08:23 +0200)
commit58fccee659d78db74055f7004cdc34cbdef70afa
tree86e099da6668a7f469f2f5f7a69d7f656c9cff19
parent35722349b68c44b9596cd05338326fe83269f023
Bluetooth: hci_qca: Bug fix during SSR timeout

[ Upstream commit f98aa80ff78c34fe328eb9cd3e2cc3058e42bcfd ]

Due to race conditions between qca_hw_error and qca_controller_memdump
during SSR timeout,the same pointer is freed twice. This results in a
double free. Now a lock is acquired before checking the stauts of SSR
state.

Fixes: d841502c79e3 ("Bluetooth: hci_qca: Collect controller memory dump during SSR")
Signed-off-by: Venkata Lakshmi Narayana Gubba <gubbaven@codeaurora.org>
Reviewed-by: Abhishek Pandit-Subedi <abhishekpandit@chromium.org>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/bluetooth/hci_qca.c