Tomas Bortoli 05b9c7b005 Bluetooth: hci_bcsp: Fix memory leak in rx_skb ...

[ Upstream commit 4ce9146e03 ]

Syzkaller found that it is possible to provoke a memory leak by
never freeing rx_skb in struct bcsp_struct.

Fix by freeing in bcsp_close()

Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Reported-by: syzbot+98162c885993b72f19c4@syzkaller.appspotmail.com
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-07-31 07:28:32 +02:00

..

ath3k.c

…

bcm203x.c

…

bfusb.c

…

bluecard_cs.c

…

bpa10x.c

…

bt3c_cs.c

…

btbcm.c

…

btbcm.h

…

btintel.c

…

btintel.h

…

btmrvl_debugfs.c

…

btmrvl_drv.h

…

btmrvl_main.c

…

btmrvl_sdio.c

…

btmrvl_sdio.h

…

btqca.c

…

btqca.h

…

btqcomsmd.c

…

btrtl.c

…

btrtl.h

…

btsdio.c

…

btuart_cs.c

…

btusb.c

Bluetooth: btusb: request wake pin with NOAUTOEN

2019-05-08 07:20:51 +02:00

btwilink.c

…

dtl1_cs.c

…

hci_ag6xx.c

…

hci_ath.c

…

hci_bcm.c

…

hci_bcsp.c

Bluetooth: hci_bcsp: Fix memory leak in rx_skb

2019-07-31 07:28:32 +02:00

hci_h4.c

Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()

2019-03-27 14:13:53 +09:00

hci_h5.c

…

hci_intel.c

…

hci_ldisc.c

Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto()

2019-03-27 14:13:53 +09:00

hci_ll.c

…

hci_mrvl.c

…

hci_nokia.c

…

hci_qca.c

…

hci_serdev.c

…

hci_uart.h

…

hci_vhci.c

…

Kconfig

…

Makefile

…