Unverified Commit 0342dc44 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!5376 Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhengchao Shao <shaozhengchao@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/5GJGGEO5TCPB2DFX2RUSBK6LFCUQ2MMT/ 
 
https://gitee.com/src-openeuler/kernel/issues/I8YV3O 
 
Link:https://gitee.com/openeuler/kernel/pulls/5376

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarZheng Zengkai <zhengzengkai@huawei.com>
parents 6e35fafe e50ff347

net/bluetooth/rfcomm/core.c

+1 −1
Original line number Diff line number Diff line
@@ -1941,7 +1941,7 @@ static struct rfcomm_session *rfcomm_process_rx(struct rfcomm_session *s) 
	/* Get data directly from socket receive queue without copying it. */

	while ((skb = skb_dequeue(&sk->sk_receive_queue))) {

		skb_orphan(skb);

		if (!skb_linearize(skb)) {

		if (!skb_linearize(skb) && sk->sk_state != BT_CLOSED) {

			s = rfcomm_recv_frame(s, skb);

			if (!s)

				break;