Unverified Commit 5195c3d3 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!7516 [sync] PR-7483: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout 

Merge Pull Request from: @openeuler-sync-bot 
 

Origin pull request: 
https://gitee.com/openeuler/kernel/pulls/7483 
 
PR sync from: Zeng Heng <zengheng4@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/TGRVGFFM22KPODYQOSUMNQEPCVRDBY23/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9OZA9 
 
Link:https://gitee.com/openeuler/kernel/pulls/7516

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 552c072d 692aa698

net/bluetooth/sco.c

+4 −0
Original line number Diff line number Diff line
@@ -83,6 +83,10 @@ static void sco_sock_timeout(struct work_struct *work) 
	struct sock *sk;



	sco_conn_lock(conn);

	if (!conn->hcon) {

		sco_conn_unlock(conn);

		return;

	}

	sk = conn->sk;

	if (sk)

		sock_hold(sk);