Unverified Commit 7d0e3ec6 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!4891 Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhengchao Shao <shaozhengchao@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/I3JU75I4KGIVETOUHERVF5UKLKSYLSX6/ 
 
https://gitee.com/src-openeuler/kernel/issues/I8YV3O 
 
Link:https://gitee.com/openeuler/kernel/pulls/4891

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 6adee009 00ed43f4

net/bluetooth/rfcomm/core.c

+1 −1
Original line number Diff line number Diff line
@@ -1937,7 +1937,7 @@ static struct rfcomm_session *rfcomm_process_rx(struct rfcomm_session *s) 
	/* Get data directly from socket receive queue without copying it. */

	while ((skb = skb_dequeue(&sk->sk_receive_queue))) {

		skb_orphan(skb);

		if (!skb_linearize(skb)) {

		if (!skb_linearize(skb) && sk->sk_state != BT_CLOSED) {

			s = rfcomm_recv_frame(s, skb);

			if (!s)

				break;