summaryrefslogtreecommitdiffstats
path: root/net/bluetooth/l2cap_core.c
diff options
context:
space:
mode:
authorMartin Townsend2014-10-13 20:24:45 +0200
committerMarcel Holtmann2014-10-25 07:56:25 +0200
commitee93053d569b8b56e09a278fc9c41b7adf070a96 (patch)
tree8ad25c2d3298ca0d46cde38cf15bb4989fe6f352 /net/bluetooth/l2cap_core.c
parent6lowpan: Use skb_cow in IPHC decompression. (diff)
downloadkernel-qcow2-linux-ee93053d569b8b56e09a278fc9c41b7adf070a96.tar.gz
kernel-qcow2-linux-ee93053d569b8b56e09a278fc9c41b7adf070a96.tar.xz
kernel-qcow2-linux-ee93053d569b8b56e09a278fc9c41b7adf070a96.zip
Bluetooth: Fix missing channel unlock in l2cap_le_credits
In the error case where credits is greater than max_credits there is a missing l2cap_chan_unlock before returning. Signed-off-by: Martin Townsend <mtownsend1973@gmail.com> Tested-by: Jukka Rissanen <jukka.rissanen@linux.intel.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Diffstat (limited to 'net/bluetooth/l2cap_core.c')
-rw-r--r--net/bluetooth/l2cap_core.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/bluetooth/l2cap_core.c b/net/bluetooth/l2cap_core.c
index 2ff5591bee97..d46c5127f6c3 100644
--- a/net/bluetooth/l2cap_core.c
+++ b/net/bluetooth/l2cap_core.c
@@ -5492,6 +5492,7 @@ static inline int l2cap_le_credits(struct l2cap_conn *conn,
if (credits > max_credits) {
BT_ERR("LE credits overflow");
l2cap_send_disconn_req(chan, ECONNRESET);
+ l2cap_chan_unlock(chan);
/* Return 0 so that we don't trigger an unnecessary
* command reject packet.