summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDave Young2008-03-03 21:18:55 +0100
committerDavid S. Miller2008-03-03 21:18:55 +0100
commit8e8440f53593b5f9c695f18b493b535873dbb9da (patch)
treee0429845227215de8284bcd9e7824ad26d4c8b7b
parent[NET]: Fix race in generic address resolution. (diff)
downloadkernel-qcow2-linux-8e8440f53593b5f9c695f18b493b535873dbb9da.tar.gz
kernel-qcow2-linux-8e8440f53593b5f9c695f18b493b535873dbb9da.tar.xz
kernel-qcow2-linux-8e8440f53593b5f9c695f18b493b535873dbb9da.zip
[BLUETOOTH]: l2cap info_timer delete fix in hci_conn_del
When the l2cap info_timer is active the info_state will be set to L2CAP_INFO_FEAT_MASK_REQ_SENT, and it will be unset after the timer is deleted or timeout triggered. Here in l2cap_conn_del only call del_timer_sync when the info_state is set to L2CAP_INFO_FEAT_MASK_REQ_SENT. Signed-off-by: Dave Young <hidave.darkstar@gmail.com> Acked-by: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--net/bluetooth/l2cap.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/net/bluetooth/l2cap.c b/net/bluetooth/l2cap.c
index 7c5459c8e8ef..34f8bf98bc05 100644
--- a/net/bluetooth/l2cap.c
+++ b/net/bluetooth/l2cap.c
@@ -417,7 +417,8 @@ static void l2cap_conn_del(struct hci_conn *hcon, int err)
l2cap_sock_kill(sk);
}
- del_timer_sync(&conn->info_timer);
+ if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT)
+ del_timer_sync(&conn->info_timer);
hcon->l2cap_data = NULL;
kfree(conn);